Merge pull request #128396 from ritazh/deprecate-EnforceMountableSecretsAnnotation

deprecate EnforceMountableSecretsAnnotation in 1.32

Kubernetes-commit: bc79d3ba87b8b3c4b7c68f26cdfcaa35654d96ac
This commit is contained in:
Kubernetes Publisher 2024-11-05 06:07:40 +00:00
commit 3fc0d17041
3 changed files with 4 additions and 4 deletions

2
go.mod
View File

@ -26,7 +26,7 @@ require (
golang.org/x/time v0.7.0
google.golang.org/protobuf v1.35.1
gopkg.in/evanphx/json-patch.v4 v4.12.0
k8s.io/api v0.0.0-20241104230203-4b3ef362bdf5
k8s.io/api v0.0.0-20241105070142-433e4b64e6cd
k8s.io/apimachinery v0.0.0-20241104225908-9500acc2d964
k8s.io/klog/v2 v2.130.1
k8s.io/kube-openapi v0.0.0-20240827152857-f7e401e7b4c2

4
go.sum
View File

@ -152,8 +152,8 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
k8s.io/api v0.0.0-20241104230203-4b3ef362bdf5 h1:2hLPoxrVpIps1KFX3gseNypOaMm3qNiGd4X4G7sDITM=
k8s.io/api v0.0.0-20241104230203-4b3ef362bdf5/go.mod h1:mp+gO7jvg9YbSvPU5PHKqKtHXwF5DBApTCw7TFflWqU=
k8s.io/api v0.0.0-20241105070142-433e4b64e6cd h1:bv8oW58STfMydUY5pCrXH0DPrEURaT30WA3kBDuZhgA=
k8s.io/api v0.0.0-20241105070142-433e4b64e6cd/go.mod h1:mp+gO7jvg9YbSvPU5PHKqKtHXwF5DBApTCw7TFflWqU=
k8s.io/apimachinery v0.0.0-20241104225908-9500acc2d964 h1:kNmV/yxcgj6VWL2DDn4jANbDt7vjHTd342ZmSQG3xi4=
k8s.io/apimachinery v0.0.0-20241104225908-9500acc2d964/go.mod h1:RBz1atosgwQyw4A8TzwjTQDnBVo/eak+3xLfOQr/By8=
k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=

View File

@ -6851,7 +6851,7 @@
"description": "Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata"
},
"secrets": {
"description": "Secrets is a list of the secrets in the same namespace that pods running using this ServiceAccount are allowed to use. Pods are only limited to this list if this service account has a \"kubernetes.io/enforce-mountable-secrets\" annotation set to \"true\". This field should not be used to find auto-generated service account token secrets for use outside of pods. Instead, tokens can be requested directly using the TokenRequest API, or service account token secrets can be manually created. More info: https://kubernetes.io/docs/concepts/configuration/secret",
"description": "Secrets is a list of the secrets in the same namespace that pods running using this ServiceAccount are allowed to use. Pods are only limited to this list if this service account has a \"kubernetes.io/enforce-mountable-secrets\" annotation set to \"true\". The \"kubernetes.io/enforce-mountable-secrets\" annotation is deprecated since v1.32. Prefer separate namespaces to isolate access to mounted secrets. This field should not be used to find auto-generated service account token secrets for use outside of pods. Instead, tokens can be requested directly using the TokenRequest API, or service account token secrets can be manually created. More info: https://kubernetes.io/docs/concepts/configuration/secret",
"items": {
"allOf": [
{