Post

From all the #Kubernetes enhancement proposals which one you are most excited about? For me it's KEP-3962 where mutating admission policies can be defined with CEL expressions. This completes the validating admission work and gives us a fully-featured policy engine 🎉 github.com/kubernetes/e...

github.comenhancements/keps/sig-api-machinery/3962-mutating-admission-policies at 7268ecc4e835437f3f75c62f555978d4bf898ff2 · kubernetes/enhancementsEnhancements tracking repo for Kubernetes. Contribute to kubernetes/enhancements development by creating an account on GitHub.

29/10/24, 9:36 am6 reposts24 likes

Keith Mattix

@keithmattix.bsky.social

29 Oct 2024

Oh yeah this one I’ve been waiting for! It’ll be awhile before we can use it in Istio of course, but love love the progress

jan

@handle.invalid

29 Oct 2024

That one and also the one about authorizing with label selectors: github.com/kubernetes/e...

github.comenhancements/keps/sig-auth/4601-authorize-with-selectors at master · kubernetes/enhancementsEnhancements tracking repo for Kubernetes. Contribute to kubernetes/enhancements development by creating an account on GitHub.

Stefan Prodan

@stefanprodan.com

29 Oct 2024

Would this allow label selectors in RBAC in the future? I really wish there will be a way to define Cluster Roles where access to objects is granted based on a label instead of just namespace or name.

jan

@handle.invalid

16 Nov 2024

I believe this is currently tracked as RBAC++ See slides from this talk: static.sched.com/hosted_files...

static.sched.comstatic.sched.com

jan

@handle.invalid

29 Oct 2024

that would be really cool but I'm not sure. Maybe in the long run