KEP-1558keps/sig-node/1558-streaming-proxy-redirects
Cleaning up container streaming requests
There are several features and flags for handling container streaming requests (exec/attach/port-forward). Having so many different ways of handling these requests unnecessarily complicates configuration, and opens the cluster to potential security risks. This is a proposal to consolidate the current options into a single supported configuration. Specificall… Full summary
There are several features and flags for handling container streaming requests (exec/attach/port-forward). Having so many different ways of handling these requests unnecessarily complicates configuration, and opens the cluster to potential security risks. This is a proposal to consolidate the current options into a single supported configuration. Specifically, it proposes: 1. Deprecate the Kubelet's --redirect-container-streaming feature 2. Deprecate the StreamingProxyRedirects feature
Facts
- Authors
- @tallclair
- Approvers
- @derekwaynecarr@random-liu
- PRR approvers
- @johnbelamaricstable
- Tracking issue
- #1558(opens GitHub in a new tab) closedcompletedclosed 2022-03-04 22:19 UTCmilestone v1.24sig/nodesig/api-machinerykind/deprecation
- Milestones
- none
- Participating SIGs
- sig-api-machinery
- Feature gates
- none
- Created / last updated
- 2019-12-05 / 2022-07-12
Loading decisions and status history