kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #45253 from yt2985/stable-feature 

Revise the feature gate LegacyServiceAccountTokenCleanUp to stable stage
pull/45525/head
Kubernetes Prow Robot 2024-03-11 21:08:54 -07:00 committed by GitHub
parent 7275d2cccf 9c04fe63ba
commit a872b99e00
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
content/en/docs/reference/command-line-tools-reference/feature-gates/legacy-service-account-token-clean-up.md
View File

@ -13,6 +13,10 @@ stages:
- stage: beta - stage: beta
defaultValue: true defaultValue: true
fromVersion: "1.29" fromVersion: "1.29"
toVersion: "1.29"
- stage: stable
defaultValue: true
fromVersion: "1.30"
--- ---
Enable cleaning up Secret-based Enable cleaning up Secret-based
[service account tokens](/docs/concepts/security/service-accounts/#get-a-token) [service account tokens](/docs/concepts/security/service-accounts/#get-a-token)

12
content/en/docs/reference/labels-annotations-taints/_index.md
View File

@ -1105,13 +1105,11 @@ Example: `kubernetes.io/legacy-token-invalid-since: 2023-10-27`
Used on: Secret Used on: Secret
The control plane automatically adds this label to auto-generated Secrets that The control plane automatically adds this label to auto-generated Secrets that
have the type `kubernetes.io/service-account-token`, provided that you have the have the type `kubernetes.io/service-account-token`. This label marks the
`LegacyServiceAccountTokenCleanUp` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/) Secret-based token as invalid for authentication. The value of this label
enabled. Kubernetes {{< skew currentVersion >}} enables that behavior by default. records the date (ISO 8601 format, UTC time zone) when the control plane detects
This label marks the Secret-based token as invalid for authentication. The value that the auto-generated Secret has not been used for a specified duration
of this label records the date (ISO 8601 format, UTC time zone) when the control (defaults to one year).
plane detects that the auto-generated Secret has not been used for a specified
duration (defaults to one year).
### endpointslice.kubernetes.io/managed-by {#endpointslicekubernetesiomanaged-by} ### endpointslice.kubernetes.io/managed-by {#endpointslicekubernetesiomanaged-by}