From 92707cafbb67a5664324eb891ef70ab3d1dd4a97 Mon Sep 17 00:00:00 2001 From: ialidzhikov Date: Thu, 10 Mar 2022 09:46:20 +0200 Subject: [PATCH] apiserver: Remove the deprecated `--service-account-api-audiences` flag Signed-off-by: ialidzhikov --- pkg/kubeapiserver/options/authentication.go | 6 ------ 1 file changed, 6 deletions(-) diff --git a/pkg/kubeapiserver/options/authentication.go b/pkg/kubeapiserver/options/authentication.go index 0ecbc5c533c..0caaef83003 100644 --- a/pkg/kubeapiserver/options/authentication.go +++ b/pkg/kubeapiserver/options/authentication.go @@ -341,12 +341,6 @@ func (o *BuiltInAuthenticationOptions) AddFlags(fs *pflag.FlagSet) { "and key set are served to relying parties from a URL other than the "+ "API server's external (as auto-detected or overridden with external-hostname). ") - // Deprecated in 1.13 - fs.StringSliceVar(&o.APIAudiences, "service-account-api-audiences", o.APIAudiences, ""+ - "Identifiers of the API. The service account token authenticator will validate that "+ - "tokens used against the API are bound to at least one of these audiences.") - fs.MarkDeprecated("service-account-api-audiences", "Use --api-audiences") - fs.DurationVar(&o.ServiceAccounts.MaxExpiration, "service-account-max-token-expiration", o.ServiceAccounts.MaxExpiration, ""+ "The maximum validity duration of a token created by the service account token issuer. If an otherwise valid "+ "TokenRequest with a validity duration larger than this value is requested, a token will be issued with a validity duration of this value.")