Cici Huang

Release Team Lead access for @cici37 @jlbutler @salaxander @gracenng @leonardpahlke

5

### GitHub Username(s) - @cici37 - @jlbutler - @salaxander - @gracenng - @leonardpahlke ### Release Cycle Kubernetes 1.25 ### Prerequisites - [x] Ensure new Release Team Lead: - [x] Has...

Fix the documentation and code to adjust the changes of removing rc cut in minor releases

3

#### What happened: While cutting release, found documentation and code is not properly reflect the changes of not having rc cut, especially for image promotion. #### What you expected to...

CEL in Admission(ValidatingAdmissionPolicy): explicitly excluding resources from validatingadmissionpolicy interception

11

### What would you like to be added? Currently, the vap only prevent itself and the binding from being intercepted: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission.go#L189-L197 We would love to revisit this before going to...

Scalability evaluation for validatingadmissionpolicy

2

### What would you like to be added? [Validating Admission Policy](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/) was graduated to beta in 1.28. Since the feature is expected to be stable, the scalability evaluation is expected...

**Feature request checklist** - [ ] Move the cost estimator back into cel-go from Kubernetes **Change** Currently the cost of extension library used in Kubernetes: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/cel/library/cost.go It should be moved...

Disable VAP test from alpha/beta since it is GA

7

ValidatingAdmissionPolicy is graduated to GA in 1.30 and the feature gate is turned on by default, hence we will disable the test from alpha/beta. The same e2e tests are enabled...

Document two new feature gates around CEL cost enforcement

10

### Description related PR: https://github.com/kubernetes/kubernetes/pull/124675 ### Issue Closes: #

CEL cost system: differentiate where the cost comes from when exceed the limit

4

### What would you like to be added? While discussing the cost exceed case raised by @padlar, @liggitt suggested to surface whether the cost was dominated by the complexity of...

Document two new feature gates around CEL cost enforcement

14

related PR: https://github.com/kubernetes/kubernetes/pull/124675 ### Description ### Issue Closes: #

Hi prometheus community, CRD, as the most popular extension point of Kubernetes, is used heavily in prometheus project. I would like to mention that Kubernetes is now supporting [CRD validation...