Support for ambient capabilities in kubernetes.

[vinayakankugoyal]

Enhancement Description

• One-line enhancement description (can be used as a release note): Support ambient capabilities in kubernetes.
• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/blob/master/keps/sig-security/2763-ambient-capabilities/README.md
• Discussion Link: Kubernetes should configure the ambient capability set kubernetes#56374
• Primary contact (assignee): @vinayakankugoyal
• Responsible SIGs: sig-security
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y): 1.24
  • Beta release target (x.y):
  • Stable release target (x.y):
• Alpha
  • KEP (k/enhancements) update PR(s):
    • KEP 2763: Ambient capabilities in Kubernetes #2757
  • Code (k/k) update PR(s):
    • Update CRI-API Capabilities to include a field that allows us to set … kubernetes#104620
  • Docs (k/website) update PR(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[vinayakankugoyal]

/sig security

[vinayakankugoyal]

/assign @vinayakankugoyal

[vinayakankugoyal]

/milestone 1.23

[k8s-ci-robot]

@vinayakankugoyal: You must be a member of the kubernetes/milestone-maintainers GitHub team to set the milestone. If you believe you should be able to issue the /milestone command, please contact your and have them propose you as an additional delegate for this responsibility.

In response to this:

/milestone 1.23

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[Priyankasaggu11929]

Hello @vinayakankugoyal, 1.23 Enhancements shadow here. Just checking in as we approach enhancements freeze on Thursday 09/09. Here's where this enhancement currently stands:

• KEP file using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable
• KEP has a test plan section filled out.
• KEP has up to date gradution criteria.
• KEP has a production readiness review that has been completed and merged into k/enhancements.

Starting with 1.23, we have implented a soft freeze on production readiness reviews beginning on Thursday 09/02. If your enhancement needs a PRR, please make sure to try and complete it by that date!

For this enhancement, it looks like we need the following to be updated in the PR #2757:

• KEP status marked as implementable.
• KEP's test plan section filled out
• A completed PRR for the alpha release

Thanks!

[Priyankasaggu11929]

Hello @vinayakankugoyal, 1.23 Enhancements shadow here. Just checking in once again as we approach more closer to the enhancements freeze on Thursday 09/09. Here's where this enhancement currently stands:

• KEP file using the latest template has been merged into the k/enhancements repo.
• KEP status is marked as implementable
• KEP has a test plan section filled out.
• KEP has up to date gradution criteria.
• KEP has a production readiness review that has been completed and merged into k/enhancements.

For this enhancement, we need the following to be updated in the PR #2757 to be tracked under the kubernetes 1.23 release:

• KEP status must be marked as implementable.
• KEP's test plan section filled out
• Update the kep.yaml file in the PR to fill all the TODO/TBC/TBD placeholders.
• Add the PRR file for the alpha release stage & have it merged into the k/enhancements repo

Thanks!