From 007ef653ad089180d02a58782bbd3912e875354d Mon Sep 17 00:00:00 2001 From: Nabarun Pal Date: Thu, 24 Aug 2023 15:56:56 +0530 Subject: [PATCH] add feature gates for authorization config Signed-off-by: Nabarun Pal --- pkg/features/kube_features.go | 2 ++ .../src/k8s.io/apiserver/pkg/features/kube_features.go | 9 +++++++++ 2 files changed, 11 insertions(+) diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go index 64012406515..cb5e0c78f85 100644 --- a/pkg/features/kube_features.go +++ b/pkg/features/kube_features.go @@ -1145,6 +1145,8 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS genericfeatures.ServerSideFieldValidation: {Default: true, PreRelease: featuregate.GA, LockToDefault: true}, // remove in 1.29 + genericfeatures.StructuredAuthorizationConfiguration: {Default: false, PreRelease: featuregate.Alpha}, + genericfeatures.UnauthenticatedHTTP2DOSMitigation: {Default: true, PreRelease: featuregate.Beta}, // inherited features from apiextensions-apiserver, relisted here to get a conflict if it is changed diff --git a/staging/src/k8s.io/apiserver/pkg/features/kube_features.go b/staging/src/k8s.io/apiserver/pkg/features/kube_features.go index 5468c253997..c7d699d5405 100644 --- a/staging/src/k8s.io/apiserver/pkg/features/kube_features.go +++ b/staging/src/k8s.io/apiserver/pkg/features/kube_features.go @@ -223,6 +223,13 @@ const ( // Enables Structured Authentication Configuration StructuredAuthenticationConfiguration featuregate.Feature = "StructuredAuthenticationConfiguration" + // owner: @palnabarun + // kep: https://kep.k8s.io/3221 + // alpha: v1.29 + // + // Enables Structured Authorization Configuration + StructuredAuthorizationConfiguration featuregate.Feature = "StructuredAuthorizationConfiguration" + // owner: @wojtek-t // alpha: v1.15 // beta: v1.16 @@ -305,6 +312,8 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS StructuredAuthenticationConfiguration: {Default: false, PreRelease: featuregate.Alpha}, + StructuredAuthorizationConfiguration: {Default: false, PreRelease: featuregate.Alpha}, + UnauthenticatedHTTP2DOSMitigation: {Default: true, PreRelease: featuregate.Beta}, WatchBookmark: {Default: true, PreRelease: featuregate.GA, LockToDefault: true},