Skip to content

[RFC-0014] RFC refinements - #6105

Open
matheuscscp wants to merge 1 commit into
mainfrom
rfc-0014-refinement
Open

matheuscscp wants to merge 1 commit into
mainfrom
rfc-0014-refinement

Conversation

@matheuscscp

@matheuscscp matheuscscp commented Oct 8, 2026 •

Copy link
Copy Markdown
Member

Follow-up for: #5702
Part of: #6103
Preview: https://github.com/fluxcd/flux2/blob/rfc-0014-refinement/rfcs/0014-advanced-support-for-short-lived-cryptographic-material

  • Several wording improvements.
  • Major redesign for Kustomization.spec.decryption.
  • Kubernetes actually does support issuing X.509 (client-only) certs for ServiceAccounts. This completes the credential.provider versus credential.type matrix, and also introduces kubernetes for tls.clientAuth.provider.
  • Standardizing all SPIFFE ID inputs as a single value. The field trustDomain was redundant and could be expressed with just spiffe://<trust domain>.
  • Adding fields for cloud provider inputs.

@matheuscscp matheuscscp added enhancement New feature or request area/rfc Feature request proposals in the RFC format area/security Security related issues and pull requests area/oci OCI related issues and pull requests labels Oct 8, 2026
@matheuscscp matheuscscp mentioned this pull request Oct 8, 2026
3 tasks
Signed-off-by: Matheus Pimenta <matheuscscp@gmail.com>

@stefanprodan stefanprodan left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@matheuscscp

Copy link
Copy Markdown
Member Author

Gonna need a few more updates, now the RFC is not covering KMS

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/oci OCI related issues and pull requests area/rfc Feature request proposals in the RFC format area/security Security related issues and pull requests enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants