Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Securing APIService for Visibility Feature #4433

Open
3 tasks
kannon92 opened this issue Feb 27, 2025 · 0 comments
Open
3 tasks

Securing APIService for Visibility Feature #4433

kannon92 opened this issue Feb 27, 2025 · 0 comments
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@kannon92
Copy link
Contributor

What would you like to be added:
https://github.com/kubernetes-sigs/kueue/blob/main/config/components/visibility/apiservice_v1beta1.yaml

APIService skips TLS checks so we will not enable this feature for our cluster.

Kueue should provide support for securing this service using certificates.

Why is this needed:

For my organization, any endpoint not guarded by TLS or using insecure options is flagged as a potential security vulnerability. Since this is an optional feature we are not deploying this in our Kueue instalation. It would be a good feature to have.

Completion requirements:

This enhancement requires the following artifacts:

  • Design doc
  • API change
  • Docs update

The artifacts should be linked in subsequent comments.

@kannon92 kannon92 added the kind/feature Categorizes issue or PR as related to a new feature. label Feb 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

1 participant