diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go index 992890108eb..2419f797d05 100644 --- a/pkg/features/kube_features.go +++ b/pkg/features/kube_features.go @@ -377,6 +377,13 @@ const ( // separate filesystems. KubeletSeparateDiskGC featuregate.Feature = "KubeletSeparateDiskGC" + // owner: @aramase + // kep: http://kep.k8s.io/4412 + // + // Enable kubelet to send the service account token bound to the pod for which the image + // is being pulled to the credential provider plugin. + KubeletServiceAccountTokenForCredentialProviders featuregate.Feature = "KubeletServiceAccountTokenForCredentialProviders" + // owner: @sallyom // kep: https://kep.k8s.io/2832 // diff --git a/pkg/features/versioned_kube_features.go b/pkg/features/versioned_kube_features.go index 10faa7dc899..5e66e5aff70 100644 --- a/pkg/features/versioned_kube_features.go +++ b/pkg/features/versioned_kube_features.go @@ -456,6 +456,10 @@ var defaultVersionedKubernetesFeatureGates = map[featuregate.Feature]featuregate {Version: version.MustParse("1.31"), Default: true, PreRelease: featuregate.Beta}, }, + KubeletServiceAccountTokenForCredentialProviders: { + {Version: version.MustParse("1.33"), Default: false, PreRelease: featuregate.Alpha}, + }, + KubeletTracing: { {Version: version.MustParse("1.25"), Default: false, PreRelease: featuregate.Alpha}, {Version: version.MustParse("1.27"), Default: true, PreRelease: featuregate.Beta}, diff --git a/test/featuregates_linter/test_data/versioned_feature_list.yaml b/test/featuregates_linter/test_data/versioned_feature_list.yaml index 7ae7ac44cef..c57cf3b0127 100644 --- a/test/featuregates_linter/test_data/versioned_feature_list.yaml +++ b/test/featuregates_linter/test_data/versioned_feature_list.yaml @@ -670,6 +670,12 @@ lockToDefault: false preRelease: Beta version: "1.31" +- name: KubeletServiceAccountTokenForCredentialProviders + versionedSpecs: + - default: false + lockToDefault: false + preRelease: Alpha + version: "1.33" - name: KubeletTracing versionedSpecs: - default: false