Harden Kubelet Serving Certificate Validation in Kube-API server

[g-gaston]

Enhancement Description

• One-line enhancement description (can be used as a release note): Harden Kubelet Serving Certificate Validation in Kube-API server
• Kubernetes Enhancement Proposal: Harden Kubelet Serving Certificate Validation in Kube-API server #4872
• Discussion Link: sig-auth meeting on August 28th 2024
• Primary contact (assignee): @g-gaston
• Responsible SIGs: sig-auth
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y):
  • Beta release target (x.y):
  • Stable release target (x.y):
• Alpha
  • KEP (k/enhancements) update PR(s):
  • Code (k/k) update PR(s):
  • Docs (k/website) update PR(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[g-gaston]

/sig auth

[sftim]

I imagine this is also relevant to SIG Security.