keps/sig-auth/266-kubelet-client-certificate-bootstrap-rotation/kep.yaml

title: Kubelet client certificate bootstrap and rotation
kep-number: 266
authors:
  - "@jcbsmpsn"
  - "@liggitt"
owning-sig: sig-auth
participating-sigs:
  - sig-auth
  - sig-node
status: implemented
creation-date: 2017-06-27
reviewers:
  - "@smarterclayton"
  - "@mikedanese"
approvers:
  - "@smarterclayton"
  - "@mikedanese"
  - "@johnbelamaric"
see-also:
  - "/keps/sig-auth/20190607-certificates-api.md"
replaces:
  - https://github.com/kubernetes/community/pull/768
latest-milestone: "v1.19"
milestone:
  alpha: "v1.4"
  beta: "v1.8"
  stable: "v1.19"
feature-gates:
  - name: RotateKubeletClientCertificate
    components:
      - kubelet
disable-supported: true
metrics:
  - kubelet_certificate_manager_client_expiration_seconds
  - kubelet_certificate_manager_client_expiration_renew_errors
stage: stable