Merge pull request #45253 from yt2985/stable-feature
Revise the feature gate LegacyServiceAccountTokenCleanUp to stable stagepull/45525/head
commit
a872b99e00
|
@ -13,6 +13,10 @@ stages:
|
|||
- stage: beta
|
||||
defaultValue: true
|
||||
fromVersion: "1.29"
|
||||
toVersion: "1.29"
|
||||
- stage: stable
|
||||
defaultValue: true
|
||||
fromVersion: "1.30"
|
||||
---
|
||||
Enable cleaning up Secret-based
|
||||
[service account tokens](/docs/concepts/security/service-accounts/#get-a-token)
|
||||
|
|
|
@ -1105,13 +1105,11 @@ Example: `kubernetes.io/legacy-token-invalid-since: 2023-10-27`
|
|||
Used on: Secret
|
||||
|
||||
The control plane automatically adds this label to auto-generated Secrets that
|
||||
have the type `kubernetes.io/service-account-token`, provided that you have the
|
||||
`LegacyServiceAccountTokenCleanUp` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
|
||||
enabled. Kubernetes {{< skew currentVersion >}} enables that behavior by default.
|
||||
This label marks the Secret-based token as invalid for authentication. The value
|
||||
of this label records the date (ISO 8601 format, UTC time zone) when the control
|
||||
plane detects that the auto-generated Secret has not been used for a specified
|
||||
duration (defaults to one year).
|
||||
have the type `kubernetes.io/service-account-token`. This label marks the
|
||||
Secret-based token as invalid for authentication. The value of this label
|
||||
records the date (ISO 8601 format, UTC time zone) when the control plane detects
|
||||
that the auto-generated Secret has not been used for a specified duration
|
||||
(defaults to one year).
|
||||
|
||||
### endpointslice.kubernetes.io/managed-by {#endpointslicekubernetesiomanaged-by}
|
||||
|
||||
|
|
Loading…
Reference in New Issue