KEP-2413keps/sig-node/2413-seccomp-by-default

Seccomp by default

implementablestablesig-nodelatest v1.271 open finding

KEP on GitHub kep.yaml Ask about this KEP

Enable seccomp by default for all workloads running on Kubernetes to improve the default security of the overall system.

Facts

Authors: @saschagrunert @mrunalp
Approvers: @mrunalp
Reviewers: @mrunalp @tallclair
PRR approvers: @deads2kalpha@deads2kbeta@deads2kstable
Tracking issue: #2413(opens GitHub in a new tab) closedcompletedclosed 2023-04-25 08:49 UTCmilestone v1.27sig/nodestage/stablekind/featuresig/security
Milestones: alpha v1.22beta v1.25stable v1.27
Participating SIGs: sig-security
Feature gates: SeccompDefault
Created / last updated: 2021-02-03 / none

Who decided each state, with the evidence.
Decided	Decision	Deciders	Evidence
2021-02-03 09:42 UTC	prr_approval deads2k gave the production readiness approval for KEP-2413 at alpha on 2021-02-03.	@deads2k prr_approver	Document 2413.yaml(opens GitHub in a new tab)
2021-05-11 16:58 UTC	stage_graduation KEP-2413 set milestone.alpha to v1.22 in PR #2414, approved by deads2k, derekwaynecarr; merged by automation (k8s-ci-robot) on 2021-05-11.	@saschagrunert author @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@34fa3dd6d71f9d72b8df1850ee90d15383427dda(opens GitHub in a new tab) StatusChange milestone.alpha ∅ → v1.22 (2021-02-03)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#2414 Add KEP for enabling seccomp by default(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/838823030(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/838520150(opens GitHub in a new tab)
2021-05-11 16:58 UTC	stage_graduation KEP-2413 set milestone.beta to v1.23 in PR #2414, approved by deads2k, derekwaynecarr; merged by automation (k8s-ci-robot) on 2021-05-11.	@saschagrunert author @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@34fa3dd6d71f9d72b8df1850ee90d15383427dda(opens GitHub in a new tab) StatusChange milestone.beta ∅ → v1.23 (2021-02-03)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#2414 Add KEP for enabling seccomp by default(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/838823030
2021-05-11 16:58 UTC	stage_graduation KEP-2413 set milestone.stable to v1.26 in PR #2414, approved by deads2k, derekwaynecarr; merged by automation (k8s-ci-robot) on 2021-05-11.	@saschagrunert author @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@34fa3dd6d71f9d72b8df1850ee90d15383427dda(opens GitHub in a new tab) StatusChange milestone.stable ∅ → v1.26 (2021-02-03)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#2414 Add KEP for enabling seccomp by default(opens GitHub in a new tab) Comment
2021-05-11 16:58 UTC	stage_graduation KEP-2413 graduated to alpha in PR #2414, approved by deads2k, derekwaynecarr; merged by automation (k8s-ci-robot) on 2021-05-11.	@saschagrunert author @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@34fa3dd6d71f9d72b8df1850ee90d15383427dda(opens GitHub in a new tab) StatusChange stage ∅ → alpha (2021-02-03)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#2414 Add KEP for enabling seccomp by default(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/838823030
2021-05-11 16:58 UTC	status_transition KEP-2413 status set to implementable in PR #2414, approved by deads2k, derekwaynecarr; merged by automation (k8s-ci-robot) on 2021-05-11.	@saschagrunert author @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@34fa3dd6d71f9d72b8df1850ee90d15383427dda(opens GitHub in a new tab) StatusChange status ∅ → implementable (2021-02-03)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#2414 Add KEP for enabling seccomp by default(opens GitHub in a new tab) Comment kubernetes/enhancements/issues/comments/838823030
2022-03-15 09:59 UTC	prr_approval deads2k gave the production readiness approval for KEP-2413 at beta on 2022-03-15.	@deads2k prr_approver	Document 2413.yaml(opens GitHub in a new tab)
2022-06-17 16:06 UTC	milestone_retarget KEP-2413 latest-milestone moved from v1.22 to v1.25 in PR #3240, approved by deads2k, derekwaynecarr, mrunalp; merged by automation (k8s-ci-robot) on 2022-06-17.	@saschagrunert author @mrunalp approve_command @mrunalp lgtm @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@9a124fd29d1f9ddf2ff455c49a630e3181992c25(opens GitHub in a new tab) StatusChange latest_milestone v1.22 → v1.25 (2022-03-15)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#3240 KEP-2413: Graduate SeccompDefault feature to beta
2022-06-17 16:06 UTC	milestone_retarget KEP-2413 milestone.beta moved from v1.23 to v1.25 in PR #3240, approved by deads2k, derekwaynecarr, mrunalp; merged by automation (k8s-ci-robot) on 2022-06-17.	@saschagrunert author @mrunalp approve_command @mrunalp lgtm @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@9a124fd29d1f9ddf2ff455c49a630e3181992c25(opens GitHub in a new tab) StatusChange milestone.beta v1.23 → v1.25 (2022-03-15)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#3240 KEP-2413: Graduate SeccompDefault feature to beta
2022-06-17 16:06 UTC	milestone_retarget KEP-2413 milestone.stable moved from v1.26 to v1.28 in PR #3240, approved by deads2k, derekwaynecarr, mrunalp; merged by automation (k8s-ci-robot) on 2022-06-17.	@saschagrunert author @mrunalp approve_command @mrunalp lgtm @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@9a124fd29d1f9ddf2ff455c49a630e3181992c25(opens GitHub in a new tab) StatusChange milestone.stable v1.26 → v1.28 (2022-03-15)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#3240 KEP-2413: Graduate SeccompDefault feature to beta
2022-06-17 16:06 UTC	stage_graduation KEP-2413 graduated to beta from alpha in PR #3240, approved by deads2k, derekwaynecarr, mrunalp; merged by automation (k8s-ci-robot) on 2022-06-17.	@saschagrunert author @mrunalp approve_command @mrunalp lgtm @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @k8s-ci-robot merger	Commit kubernetes/enhancements@9a124fd29d1f9ddf2ff455c49a630e3181992c25(opens GitHub in a new tab) StatusChange stage alpha → beta (2022-03-15)(opens GitHub in a new tab) PullRequest kubernetes/enhancements#3240 KEP-2413: Graduate SeccompDefault feature to beta
2023-01-10 10:20 UTC	prr_approval deads2k gave the production readiness approval for KEP-2413 at stable on 2023-01-10.	@deads2k prr_approver	Document 2413.yaml(opens GitHub in a new tab)
2023-02-08 21:20 UTC	milestone_retarget KEP-2413 latest-milestone moved from v1.25 to v1.27 in PR #3718, approved by deads2k, derekwaynecarr, mrunalp; merged by automation (k8s-ci-robot) on 2023-02-08.	@saschagrunert author @mrunalp approve_command @mrunalp lgtm @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @bart0sh lgtm @k8s-ci-robot merger	Commit kubernetes/enhancements@14d5f6689e37e91d9c7c28f8b2c028f8b70f15f7(opens GitHub in a new tab) StatusChange latest_milestone v1.25 → v1.27 (2023-01-10)(opens GitHub in a new tab)
2023-02-08 21:20 UTC	stage_graduation KEP-2413 graduated to stable from beta in PR #3718, approved by deads2k, derekwaynecarr, mrunalp; merged by automation (k8s-ci-robot) on 2023-02-08.	@saschagrunert author @mrunalp approve_command @mrunalp lgtm @derekwaynecarr approve_command @derekwaynecarr lgtm @deads2k approve_command @bart0sh lgtm @k8s-ci-robot merger	Commit kubernetes/enhancements@14d5f6689e37e91d9c7c28f8b2c028f8b70f15f7(opens GitHub in a new tab) StatusChange stage beta → stable (2023-01-10)(opens GitHub in a new tab)

Metadata, label and milestone changes, oldest first.Showing 1–10 of 65Rows

Status history
At	Kind	Field	Change	Actor	Evidence
2021-02-03 09:27 UTC	label	sig/node added	none → sig/node	@k8s-ci-robot	source(opens GitHub in a new tab)
2021-02-03 09:42 UTC	metadata	approvers set	none → ["mrunalp"]	none

Relationships as stored, Person → KEP, from kep.yaml(opens GitHub in a new tab)
Person	Relationship
@saschagrunert GitHub(opens GitHub in a new tab)	—AUTHORED→
@mrunalp GitHub(opens GitHub in a new tab)	—AUTHORED→
@mrunalp GitHub(opens GitHub in a new tab)	—REVIEWS→
@tallclair

How they connect

Shortest paths in the graph between this KEP and its SIG or one of its people, up to four hops.

Impact of change

Rows returned by the tool
Kep	Depth	Reached	By hop	Open pull requests	Hop	Keps	Feature gates	Sigs	People	Open issues
{ "label": "KEP", "key": "keps/sig-node/2413-seccomp-by-default", "title": "Seccomp by default", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2413-seccomp-by-default", "evidence_id": "zf7wd5j2lwnu", "number": 2413, "owning_sig": "sig-node", "status": "implementable", "stage": "stable", "latest_milestone": "v1.27", "milestone_alpha": "v1.22", "milestone_beta": "v1.25", "milestone_stable": "v1.27", "creation_date": "2021-02-03", "metadata_invalid": false }	2	12	{ "1": { "keps": 1, "feature_gates": 1, "sigs": 1, "people": 2 }, "2": { "keps": 5, "feature_gates": 1, "open_issues": 1 } }	not in graph (merged pull requests only)	none	none	none	none	none	none
none	none	none	none	none	1	[ { "label": "KEP", "key": "keps/sig-node/6061-oci-artifact-security-profiles", "title": "OCI Artifact-Based Security Profile Distribution", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/6061-oci-artifact-security-profiles", "evidence_id": "bbiltqffyhei", "number": 6061, "owning_sig": "sig-node", "status": "implementable", "stage": "alpha", "latest_milestone": "v1.38", "milestone_alpha": "v1.38", "creation_date": "2026-05-06", "last_updated": "2026-09-24", "metadata_invalid": false } ]	[ { "label": "FeatureGate", "key": "SeccompDefault", "title": "SeccompDefault", "url": "https://github.com/kubernetes/enhancements/blob/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2413-seccomp-by-default/kep.yaml", "evidence_id": "ujxwteev5pwg", "name": "SeccompDefault" } ]	[ { "label": "SIG", "key": "sig-node", "title": "Node", "url": "https://github.com/kubernetes/community/tree/440e496d3a172234d81728df1bfe43849b589adf/sig-node", "evidence_id": "nrsuxu2xcxa7", "display_name": "Node", "sig_label": "node", "in_scope": true } ]	[ { "label": "Person", "key": "saschagrunert", "title": "saschagrunert", "url": "https://github.com/saschagrunert", "evidence_id": "seejx6hbo2ea", "login": "saschagrunert", "is_bot": false }, { "label": "Person", "key": "mrunalp", "title": "mrunalp", "url": "https://github.com/mrunalp", "evidence_id": "oysq4hgp6yuk", "login": "mrunalp", "is_bot": false } ]	none
none	none	none	none	none	2	[ { "label": "KEP", "key": "keps/sig-node/135-seccomp", "title": "Seccomp to GA", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/135-seccomp", "evidence_id": "s4gpf7pgskct", "number": 135, "owning_sig": "sig-node", "status": "implemented", "stage": "stable", "creation_date": "2019-07-17", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/24-apparmor", "title": "Add AppArmor Support", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/24-apparmor", "evidence_id": "utnnezbox7h2", "number": 24, "owning_sig": "sig-node", "status": "implementable", "stage": "stable", "latest_milestone": "v1.34", "milestone_alpha": "v1.4", "milestone_beta": "v1.4", "milestone_stable": "v1.31", "creation_date": "2020-01-10", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/2535-ensure-secret-pulled-images", "title": "Ensure Secret Pulled Images", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2535-ensure-secret-pulled-images", "evidence_id": "fvxizb637wzj", "number": 2535, "owning_sig": "sig-node", "status": "implementable", "stage": "beta", "latest_milestone": "v1.37", "milestone_alpha": "v1.33", "milestone_beta": "v1.35", "creation_date": "2021-03-10", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/4639-oci-volume-source", "title": "OCI images as VolumeSource", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/4639-oci-volume-source", "evidence_id": "fwhyno4ruqyy", "number": 4639, "owning_sig": "sig-node", "status": "implemented", "stage": "stable", "latest_milestone": "v1.36", "milestone_alpha": "v1.31", "milestone_beta": "v1.34", "milestone_stable": "v1.36", "creation_date": "2024-05-17", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/5328-node-declared-features", "title": "Node Declared Features", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/5328-node-declared-features", "evidence_id": "62aqwua4uzu4", "number": 5328, "owning_sig": "sig-node", "status": "implementable", "stage": "stable", "latest_milestone": "v1.37", "milestone_alpha": "v1.35", "milestone_beta": "v1.36", "milestone_stable": "v1.37", "creation_date": "2025-05-27", "metadata_invalid": false } ]	[ { "label": "FeatureGate", "key": "SecurityProfileOCI", "title": "SecurityProfileOCI", "url": "https://github.com/kubernetes/enhancements/blob/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/6061-oci-artifact-security-profiles/kep.yaml", "evidence_id": "gpiymmzthd4u", "name": "SecurityProfileOCI" } ]	none	none	[ { "label": "Issue", "key": "kubernetes/enhancements#6061", "title": "OCI Artifact-Based Security Profile Distribution", "url": "https://github.com/kubernetes/enhancements/issues/6061", "evidence_id": "cpvgmg362kkv", "number": 6061, "state": "open", "created_at_iso": "2026-05-06T06:51:31Z", "labels_current": [ "sig/node", "stage/alpha", "tracked/yes", "lead-opted-in" ], "milestone_current": "v1.38", "is_tracking_issue": true } ]

Rows returned by the tool
Kep	Depth	Reached	By hop	Open pull requests	Hop	Keps	Feature gates	Sigs	People	Open issues
{ "label": "KEP", "key": "keps/sig-node/2413-seccomp-by-default", "title": "Seccomp by default", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2413-seccomp-by-default", "evidence_id": "zf7wd5j2lwnu", "number": 2413, "owning_sig": "sig-node", "status": "implementable", "stage": "stable", "latest_milestone": "v1.27", "milestone_alpha": "v1.22", "milestone_beta": "v1.25", "milestone_stable": "v1.27", "creation_date": "2021-02-03", "metadata_invalid": false }	2	12	{ "1": { "keps": 1, "feature_gates": 1, "sigs": 1, "people": 2 }, "2": { "keps": 5, "feature_gates": 1, "open_issues": 1 } }	not in graph (merged pull requests only)	none	none	none	none	none	none
none	none	none	none	none	1	[ { "label": "KEP", "key": "keps/sig-node/6061-oci-artifact-security-profiles", "title": "OCI Artifact-Based Security Profile Distribution", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/6061-oci-artifact-security-profiles", "evidence_id": "bbiltqffyhei", "number": 6061, "owning_sig": "sig-node", "status": "implementable", "stage": "alpha", "latest_milestone": "v1.38", "milestone_alpha": "v1.38", "creation_date": "2026-05-06", "last_updated": "2026-09-24", "metadata_invalid": false } ]	[ { "label": "FeatureGate", "key": "SeccompDefault", "title": "SeccompDefault", "url": "https://github.com/kubernetes/enhancements/blob/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2413-seccomp-by-default/kep.yaml", "evidence_id": "ujxwteev5pwg", "name": "SeccompDefault" } ]	[ { "label": "SIG", "key": "sig-node", "title": "Node", "url": "https://github.com/kubernetes/community/tree/440e496d3a172234d81728df1bfe43849b589adf/sig-node", "evidence_id": "nrsuxu2xcxa7", "display_name": "Node", "sig_label": "node", "in_scope": true } ]	[ { "label": "Person", "key": "saschagrunert", "title": "saschagrunert", "url": "https://github.com/saschagrunert", "evidence_id": "seejx6hbo2ea", "login": "saschagrunert", "is_bot": false }, { "label": "Person", "key": "mrunalp", "title": "mrunalp", "url": "https://github.com/mrunalp", "evidence_id": "oysq4hgp6yuk", "login": "mrunalp", "is_bot": false } ]	none
none	none	none	none	none	2	[ { "label": "KEP", "key": "keps/sig-node/135-seccomp", "title": "Seccomp to GA", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/135-seccomp", "evidence_id": "s4gpf7pgskct", "number": 135, "owning_sig": "sig-node", "status": "implemented", "stage": "stable", "creation_date": "2019-07-17", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/24-apparmor", "title": "Add AppArmor Support", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/24-apparmor", "evidence_id": "utnnezbox7h2", "number": 24, "owning_sig": "sig-node", "status": "implementable", "stage": "stable", "latest_milestone": "v1.34", "milestone_alpha": "v1.4", "milestone_beta": "v1.4", "milestone_stable": "v1.31", "creation_date": "2020-01-10", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/2535-ensure-secret-pulled-images", "title": "Ensure Secret Pulled Images", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2535-ensure-secret-pulled-images", "evidence_id": "fvxizb637wzj", "number": 2535, "owning_sig": "sig-node", "status": "implementable", "stage": "beta", "latest_milestone": "v1.37", "milestone_alpha": "v1.33", "milestone_beta": "v1.35", "creation_date": "2021-03-10", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/4639-oci-volume-source", "title": "OCI images as VolumeSource", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/4639-oci-volume-source", "evidence_id": "fwhyno4ruqyy", "number": 4639, "owning_sig": "sig-node", "status": "implemented", "stage": "stable", "latest_milestone": "v1.36", "milestone_alpha": "v1.31", "milestone_beta": "v1.34", "milestone_stable": "v1.36", "creation_date": "2024-05-17", "metadata_invalid": false }, { "label": "KEP", "key": "keps/sig-node/5328-node-declared-features", "title": "Node Declared Features", "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/5328-node-declared-features", "evidence_id": "62aqwua4uzu4", "number": 5328, "owning_sig": "sig-node", "status": "implementable", "stage": "stable", "latest_milestone": "v1.37", "milestone_alpha": "v1.35", "milestone_beta": "v1.36", "milestone_stable": "v1.37", "creation_date": "2025-05-27", "metadata_invalid": false } ]	[ { "label": "FeatureGate", "key": "SecurityProfileOCI", "title": "SecurityProfileOCI", "url": "https://github.com/kubernetes/enhancements/blob/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/6061-oci-artifact-security-profiles/kep.yaml", "evidence_id": "gpiymmzthd4u", "name": "SecurityProfileOCI" } ]	none	none	[ { "label": "Issue", "key": "kubernetes/enhancements#6061", "title": "OCI Artifact-Based Security Profile Distribution", "url": "https://github.com/kubernetes/enhancements/issues/6061", "evidence_id": "cpvgmg362kkv", "number": 6061, "state": "open", "created_at_iso": "2026-05-06T06:51:31Z", "labels_current": [ "sig/node", "stage/alpha", "tracked/yes", "lead-opted-in" ], "milestone_current": "v1.38", "is_tracking_issue": true } ]

Kep

Depth

Reached

By hop

Open pull requests

Hop

Keps

Feature gates

Sigs

People

Open issues

{
  "label": "KEP",
  "key": "keps/sig-node/2413-seccomp-by-default",
  "title": "Seccomp by default",
  "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2413-seccomp-by-default",
  "evidence_id": "zf7wd5j2lwnu",
  "number": 2413,
  "owning_sig": "sig-node",
  "status": "implementable",
  "stage": "stable",
  "latest_milestone": "v1.27",
  "milestone_alpha": "v1.22",
  "milestone_beta": "v1.25",
  "milestone_stable": "v1.27",
  "creation_date": "2021-02-03",
  "metadata_invalid": false
}

{
  "1": {
    "keps": 1,
    "feature_gates": 1,
    "sigs": 1,
    "people": 2
  },
  "2": {
    "keps": 5,
    "feature_gates": 1,
    "open_issues": 1
  }
}

not in graph (merged pull requests only)

[
  {
    "label": "KEP",
    "key": "keps/sig-node/6061-oci-artifact-security-profiles",
    "title": "OCI Artifact-Based Security Profile Distribution",
    "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/6061-oci-artifact-security-profiles",
    "evidence_id": "bbiltqffyhei",
    "number": 6061,
    "owning_sig": "sig-node",
    "status": "implementable",
    "stage": "alpha",
    "latest_milestone": "v1.38",
    "milestone_alpha": "v1.38",
    "creation_date": "2026-05-06",
    "last_updated": "2026-09-24",
    "metadata_invalid": false
  }
]

[
  {
    "label": "FeatureGate",
    "key": "SeccompDefault",
    "title": "SeccompDefault",
    "url": "https://github.com/kubernetes/enhancements/blob/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2413-seccomp-by-default/kep.yaml",
    "evidence_id": "ujxwteev5pwg",
    "name": "SeccompDefault"
  }
]

[
  {
    "label": "SIG",
    "key": "sig-node",
    "title": "Node",
    "url": "https://github.com/kubernetes/community/tree/440e496d3a172234d81728df1bfe43849b589adf/sig-node",
    "evidence_id": "nrsuxu2xcxa7",
    "display_name": "Node",
    "sig_label": "node",
    "in_scope": true
  }
]

[
  {
    "label": "Person",
    "key": "saschagrunert",
    "title": "saschagrunert",
    "url": "https://github.com/saschagrunert",
    "evidence_id": "seejx6hbo2ea",
    "login": "saschagrunert",
    "is_bot": false
  },
  {
    "label": "Person",
    "key": "mrunalp",
    "title": "mrunalp",
    "url": "https://github.com/mrunalp",
    "evidence_id": "oysq4hgp6yuk",
    "login": "mrunalp",
    "is_bot": false
  }
]

[
  {
    "label": "KEP",
    "key": "keps/sig-node/135-seccomp",
    "title": "Seccomp to GA",
    "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/135-seccomp",
    "evidence_id": "s4gpf7pgskct",
    "number": 135,
    "owning_sig": "sig-node",
    "status": "implemented",
    "stage": "stable",
    "creation_date": "2019-07-17",
    "metadata_invalid": false
  },
  {
    "label": "KEP",
    "key": "keps/sig-node/24-apparmor",
    "title": "Add AppArmor Support",
    "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/24-apparmor",
    "evidence_id": "utnnezbox7h2",
    "number": 24,
    "owning_sig": "sig-node",
    "status": "implementable",
    "stage": "stable",
    "latest_milestone": "v1.34",
    "milestone_alpha": "v1.4",
    "milestone_beta": "v1.4",
    "milestone_stable": "v1.31",
    "creation_date": "2020-01-10",
    "metadata_invalid": false
  },
  {
    "label": "KEP",
    "key": "keps/sig-node/2535-ensure-secret-pulled-images",
    "title": "Ensure Secret Pulled Images",
    "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/2535-ensure-secret-pulled-images",
    "evidence_id": "fvxizb637wzj",
    "number": 2535,
    "owning_sig": "sig-node",
    "status": "implementable",
    "stage": "beta",
    "latest_milestone": "v1.37",
    "milestone_alpha": "v1.33",
    "milestone_beta": "v1.35",
    "creation_date": "2021-03-10",
    "metadata_invalid": false
  },
  {
    "label": "KEP",
    "key": "keps/sig-node/4639-oci-volume-source",
    "title": "OCI images as VolumeSource",
    "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/4639-oci-volume-source",
    "evidence_id": "fwhyno4ruqyy",
    "number": 4639,
    "owning_sig": "sig-node",
    "status": "implemented",
    "stage": "stable",
    "latest_milestone": "v1.36",
    "milestone_alpha": "v1.31",
    "milestone_beta": "v1.34",
    "milestone_stable": "v1.36",
    "creation_date": "2024-05-17",
    "metadata_invalid": false
  },
  {
    "label": "KEP",
    "key": "keps/sig-node/5328-node-declared-features",
    "title": "Node Declared Features",
    "url": "https://github.com/kubernetes/enhancements/tree/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/5328-node-declared-features",
    "evidence_id": "62aqwua4uzu4",
    "number": 5328,
    "owning_sig": "sig-node",
    "status": "implementable",
    "stage": "stable",
    "latest_milestone": "v1.37",
    "milestone_alpha": "v1.35",
    "milestone_beta": "v1.36",
    "milestone_stable": "v1.37",
    "creation_date": "2025-05-27",
    "metadata_invalid": false
  }
]

[
  {
    "label": "FeatureGate",
    "key": "SecurityProfileOCI",
    "title": "SecurityProfileOCI",
    "url": "https://github.com/kubernetes/enhancements/blob/6ebe0a94771723b3f27cb4a757f0cc22f29e38a2/keps/sig-node/6061-oci-artifact-security-profiles/kep.yaml",
    "evidence_id": "gpiymmzthd4u",
    "name": "SecurityProfileOCI"
  }
]

[
  {
    "label": "Issue",
    "key": "kubernetes/enhancements#6061",
    "title": "OCI Artifact-Based Security Profile Distribution",
    "url": "https://github.com/kubernetes/enhancements/issues/6061",
    "evidence_id": "cpvgmg362kkv",
    "number": 6061,
    "state": "open",
    "created_at_iso": "2026-05-06T06:51:31Z",
    "labels_current": [
      "sig/node",
      "stage/alpha",
      "tracked/yes",
      "lead-opted-in"
    ],
    "milestone_current": "v1.38",
    "is_tracking_issue": true
  }
]

MATCH (k:KEP {key: $key}) RETURN k LIMIT 1 ; MATCH (k:KEP {key: $key}) MATCH path = (k)-[:REPLACES|SUPERSEDED_BY|SEE_ALSO|GATED_BY*1..2]-(n) WHERE n <> k AND (n:KEP OR n:FeatureGate) AND all(x IN nodes(path)[1..-1] WHERE x <> k AND (x:KEP OR (x:FeatureGate AND NOT x.key IN $placeholders))) WITH n, path ORDER BY length(path), [x IN nodes(path) | x.key] WITH n, collect(path)[0] AS path RETURN n AS node, length(path) AS hop, path ORDER BY hop, n.key LIMIT 150 ; UNWIND $keys AS kk MATCH (k:KEP {key: kk}) RETURN k.key AS kep, [(k)-[r_0:OWNED_BY]->(s_0:SIG) WHERE coalesce(r_0.valid_to, $open) = $open | s_0] AS sigs, [(p_1:Person)-[r_1:AUTHORED]->(k) WHERE coalesce(r_1.valid_to, $open) = $open AND coalesce(p_1.is_bot, false) = false | p_1] AS authors, [(p_2:Person)-[r_2:APPROVES]->(k) WHERE coalesce(r_2.valid_to, $open) = $open AND coalesce(p_2.is_bot, false) = false | p_2] AS approvers, [(k)-[r_3:TRACKED_BY]->(i_3:Issue) WHERE coalesce(r_3.valid_to, $open) = $open AND i_3.state = 'open' | i_3] AS open_issues LIMIT 200

Seccomp by default

Facts

How they connect

Impact of change

Keyboard shortcuts

Everywhere

Go to a page

Ask

Search lists

KEP page

Findings table

How they connect

Impact of change

Hop 1

Hop 2

Impact of change

Impact of change

Hop 1

Hop 2