github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-17 15:50:10 +00:00
Code Issues Projects Releases Wiki Activity

KEP-4193: promote ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to beta

Browse Source
This commit is contained in:
James Munnelly 2024-02-05 16:36:38 +00:00
parent 026ce57c94
commit 1eab8be822
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pkg/features/kube_features.go
View File

@ -694,6 +694,7 @@ const (
// owner: @munnerz // owner: @munnerz
// kep: http://kep.k8s.io/4193 // kep: http://kep.k8s.io/4193
// alpha: v1.29 // alpha: v1.29
// beta: v1.30
// //
// Controls whether JTIs (UUIDs) are embedded into generated service account tokens, and whether these JTIs are // Controls whether JTIs (UUIDs) are embedded into generated service account tokens, and whether these JTIs are
// recorded into the audit log for future requests made by these tokens. // recorded into the audit log for future requests made by these tokens.
@ -709,6 +710,7 @@ const (
// owner: @munnerz // owner: @munnerz
// kep: http://kep.k8s.io/4193 // kep: http://kep.k8s.io/4193
// alpha: v1.29 // alpha: v1.29
// beta: v1.30
// //
// Controls whether the apiserver will validate Node claims in service account tokens. // Controls whether the apiserver will validate Node claims in service account tokens.
ServiceAccountTokenNodeBindingValidation featuregate.Feature = "ServiceAccountTokenNodeBindingValidation" ServiceAccountTokenNodeBindingValidation featuregate.Feature = "ServiceAccountTokenNodeBindingValidation"
@ -716,6 +718,7 @@ const (
// owner: @munnerz // owner: @munnerz
// kep: http://kep.k8s.io/4193 // kep: http://kep.k8s.io/4193
// alpha: v1.29 // alpha: v1.29
// beta: v1.30
// //
// Controls whether the apiserver embeds the node name and uid for the associated node when issuing // Controls whether the apiserver embeds the node name and uid for the associated node when issuing
// service account tokens bound to Pod objects. // service account tokens bound to Pod objects.
@ -1101,13 +1104,13 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS
SeparateTaintEvictionController: {Default: true, PreRelease: featuregate.Beta}, SeparateTaintEvictionController: {Default: true, PreRelease: featuregate.Beta},
ServiceAccountTokenJTI: {Default: false, PreRelease: featuregate.Alpha}, ServiceAccountTokenJTI: {Default: true, PreRelease: featuregate.Beta},
ServiceAccountTokenPodNodeInfo: {Default: false, PreRelease: featuregate.Alpha}, ServiceAccountTokenPodNodeInfo: {Default: true, PreRelease: featuregate.Beta},
ServiceAccountTokenNodeBinding: {Default: false, PreRelease: featuregate.Alpha}, ServiceAccountTokenNodeBinding: {Default: false, PreRelease: featuregate.Alpha},
ServiceAccountTokenNodeBindingValidation: {Default: false, PreRelease: featuregate.Alpha}, ServiceAccountTokenNodeBindingValidation: {Default: true, PreRelease: featuregate.Beta},
ServiceNodePortStaticSubrange: {Default: true, PreRelease: featuregate.GA, LockToDefault: true}, // GA in 1.29; remove in 1.31 ServiceNodePortStaticSubrange: {Default: true, PreRelease: featuregate.GA, LockToDefault: true}, // GA in 1.29; remove in 1.31