Add KubeletServiceAccountTokenForCredentialProviders feature gate

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

pkg/features/kube_features.go

@@ -377,6 +377,13 @@ const (
 	// separate filesystems.
 	KubeletSeparateDiskGC featuregate.Feature = "KubeletSeparateDiskGC"
 
+	// owner: @aramase
+	// kep: http://kep.k8s.io/4412
+	//
+	// Enable kubelet to send the service account token bound to the pod for which the image
+	// is being pulled to the credential provider plugin.
+	KubeletServiceAccountTokenForCredentialProviders featuregate.Feature = "KubeletServiceAccountTokenForCredentialProviders"
+
 	// owner: @sallyom
 	// kep: https://kep.k8s.io/2832
 	//

pkg/features/versioned_kube_features.go

@@ -456,6 +456,10 @@ var defaultVersionedKubernetesFeatureGates = map[featuregate.Feature]featuregate
 		{Version: version.MustParse("1.31"), Default: true, PreRelease: featuregate.Beta},
 	},
 
+	KubeletServiceAccountTokenForCredentialProviders: {
+		{Version: version.MustParse("1.33"), Default: false, PreRelease: featuregate.Alpha},
+	},
+
 	KubeletTracing: {
 		{Version: version.MustParse("1.25"), Default: false, PreRelease: featuregate.Alpha},
 		{Version: version.MustParse("1.27"), Default: true, PreRelease: featuregate.Beta},

test/featuregates_linter/test_data/versioned_feature_list.yaml

@@ -670,6 +670,12 @@
     lockToDefault: false
     preRelease: Beta
     version: "1.31"
+- name: KubeletServiceAccountTokenForCredentialProviders
+  versionedSpecs:
+  - default: false
+    lockToDefault: false
+    preRelease: Alpha
+    version: "1.33"
 - name: KubeletTracing
   versionedSpecs:
   - default: false