-
Notifications
You must be signed in to change notification settings - Fork 14.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
TokenRequest and TokenRequestProjection are GA now #24823
Conversation
Deploy preview for kubernetes-io-vnext-staging processing. Building with commit 0d0cc43 https://app.netlify.com/sites/kubernetes-io-vnext-staging/deploys/5fa2e7be3af09400072dcba0 |
/cc @liggitt |
/lgtm |
LGTM label has been added. Git tree hash: 17311838a94c083eecc328261ea389e23b4f1041
|
/milestone 1.20 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @zshihang
I've added some advice about making these changes match how SIG Docs normally does them.
This TokenRequest and TokenRequestProjection are __GA__ in 1.20 and | ||
enabled by passing all of the following flags to the API server: | ||
|
||
* `--service-account-issuer` | ||
* `--service-account-key-file` | ||
* `--service-account-signing-key-file` | ||
* `--service-account-api-audiences` | ||
* `--api-audiences` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
GA features are enabled by default. We can omit the note.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The api server requires these options be set if the functionality is desired. What is a better way to phrase this?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Suggested text added.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
thanks
content/en/docs/reference/command-line-tools-reference/feature-gates.md
Outdated
Show resolved
Hide resolved
content/en/docs/tasks/configure-pod-container/configure-service-account.md
Outdated
Show resolved
Hide resolved
As noted on this PR (kubernetes/kubernetes#93258 (comment)) the release team has no Enhancement 1205 on record as being GA for this release. Please clarify/file and exception request as necessary. |
/hold until #24823 (comment) is resolved |
exception issue is opened kubernetes/enhancements#2126 |
@@ -303,6 +303,8 @@ different Kubernetes components. | |||
| `TaintNodesByCondition` | `false` | Alpha | 1.8 | 1.11 | | |||
| `TaintNodesByCondition` | `true` | Beta | 1.12 | 1.16 | | |||
| `TaintNodesByCondition` | `true` | GA | 1.17 | - | | |||
| `TokenRequest` | `true` | GA | 1.20 | - | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do NOT remove the history.
Line 155-158 should be moved here.
The goal is to let users see the evolution history of the feature, not just its current state.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
done. the history was not removed but kept in the last section.
/hold cancel |
/hold would like to keep this on hold until KEP updates are made |
KEP updates merged. https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/1205-bound-service-account-tokens/README.md /hold cancel |
/lgtm |
LGTM label has been added. Git tree hash: 67a901f493b347db4fce21b68da0010f9a3b0464
|
/label tide/merge-method-squash |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/approve
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: irvifa The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
TokenRequest and TokenRequestProjection are GA now