John Belamaric

It almost looks like we're creeping into per-field RBAC. If we step back and think about this in that frame, does it change how we implement it? Would you still...

> It almost looks like we're creeping into per-field RBAC. If we step back and think about this in that frame, does it change how we implement it? Would you...

PRR is fine, needs SIG approval.

> I would like to see a comparison with another approach, e.g. extending RBAC to limit to specific fields only, before settling on this. This was my initial take too....

@serathius Enhancements shadow for v1.19 here. Do you see this as moving to alpha in 1.19?

Thanks, I'll add it to the tracking sheet. /stage alpha

Hi @serathius, I was looking over the KEP and noticed that there is no test plan defined. Please add a bit about the test plan in order to target to...

Thanks @serathius for answering the updated questions. When you have a chance please also re-format to the new format. You do not need to do that before the freeze tomorrow...

I believe we verified that this already works in CoreDNS. Check out https://github.com/coredns/deployment/tree/master/kubernetes to see how to deploy it.

I don’t think there is specific code to handle this case, it just falls out of how we process the services, endpoints and requests. I think we might have a...