Jordan Liggitt

@marosset the last item mentioned in https://github.com/kubernetes/enhancements/issues/3257#issuecomment-1409600888 should be complete now, can you verify this is tracked for freeze?

https://github.com/kubernetes/kubernetes/pull/113374 was moved to 1.28, only https://github.com/kubernetes/kubernetes/pull/113218 was part of the exception request for 1.27

> Question: should we disallow usernames and groups that start with system: unless some opt-in flag is set? More generically, should we have a deny list (configurable) of reserved prefixes?...

iterating on some design bits in https://hackmd.io/@enj/BJqZ0xOVn, will fold back in here

Targeting beta in 1.30

other than the gate removal timeline, lgtm

/sig release architecture

/assign

The linked PR has lgtm/approve from sig approvers, shadow PRR is complete and it's waiting for an ack from @johnbelamaric. > * there is a missing topic in the PRR...

@fsmunoz - https://github.com/kubernetes/enhancements/pull/3749 is merged, can you confirm this meets requirements to be tracked for 1.27?