KEP-1898: Hardening exec endpoints against SSRF

ALPHA

Status: Implementable

SIGs

Owning SIG:

SIG Node

Participating SIGs: SIG API Machinery , SIG Auth

Milestones

Alphav1.20

Feature Gates

This enhancement was designed with opt-in or opt-out at the feature level; there are feature gates associated with it.

Feature gates for this KEP
NameComponents
HardenedExecRequestskube-apiserver
DeprecatedKubeletStreamingAPIkubelet

People

Authors: @tallclair

Reviewers: derekwaynecarr , liggitt , sftim

Approvers: derekwaynecarr , liggitt

Timeline

Created:

Latest Milestone: v1.20

  • /keps/sig-node/20191205-container-streaming-requests.md