Proposal: KEP Encrypted Container Images Support

[lumjjb]

@stefanberger, @harche, @estesp and I have been working on OCI image encryption/decryption feature for containerd/kubernetes.

We have prepared a KEP for the feature. We think that it is relevant for sig-node and would like to share this with the group, and also get some feedback on the KEP - we are good to give a demo of the feature!

Here’s a link to the KEP draft (demo included): https://docs.google.com/document/d/1NjM58FZFRLtK2qh90WYnk-1nd8ili1d433d8pGwri6g/

@kubernetes/sig-node-proposals

[k8s-ci-robot]

@lumjjb: Reiterating the mentions to trigger a notification:
@kubernetes/sig-node-proposals

In response to this:

@stefanberger, @harche, @estesp and I have been working on OCI image encryption/decryption feature for containerd/kubernetes.

We have prepared a KEP for the feature. We think that it is relevant for sig-node and would like to share this with the group, and also get some feedback on the KEP - we are good to give a demo of the feature!

Here’s a link to the KEP draft (demo included): https://docs.google.com/document/d/1NjM58FZFRLtK2qh90WYnk-1nd8ili1d433d8pGwri6g/

@kubernetes/sig-node-proposals

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[smarterclayton]

Please make the doc commentable by the node sig group.

[harche]

@smarterclayton sorry. Just added [email protected] to that doc's ACL. Let me know if it works for you now.

[harche]

@smarterclayton let me know if the doc is commentable for you now.

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[harche]

/remove-lifecycle stale

[lumjjb]

@smarterclayton we have a demo that we'd like to show for this KEP if you think it'd be a good idea for us to share this at one of the sig weekly sync-ups?

[nikhita]

Going to close this since KEPs are being tracked in the enhancements repo. Feel free to reopen if needed.

/close

[k8s-ci-robot]

@nikhita: Closing this issue.

In response to this:

Going to close this since KEPs are being tracked in the enhancements repo. Feel free to reopen if needed.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[harche]

@nikhita Thanks.

I have opened the new issue in the enhancements repo to track this effort. kubernetes/enhancements#1067