From d398de294ddf3a41a27e19e365f34e5b1119d17c Mon Sep 17 00:00:00 2001
From: Anish Ramasekar <anish.ramasekar@gmail.com>
Date: Fri, 25 Oct 2024 13:14:52 -0700
Subject: [PATCH] Add KubeletServiceAccountTokenForCredentialProviders feature
 gate

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
---
 pkg/features/kube_features.go                              | 7 +++++++
 pkg/features/versioned_kube_features.go                    | 4 ++++
 .../test_data/versioned_feature_list.yaml                  | 6 ++++++
 3 files changed, 17 insertions(+)

diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go
index 992890108eb..2419f797d05 100644
--- a/pkg/features/kube_features.go
+++ b/pkg/features/kube_features.go
@@ -377,6 +377,13 @@ const (
 	// separate filesystems.
 	KubeletSeparateDiskGC featuregate.Feature = "KubeletSeparateDiskGC"
 
+	// owner: @aramase
+	// kep: http://kep.k8s.io/4412
+	//
+	// Enable kubelet to send the service account token bound to the pod for which the image
+	// is being pulled to the credential provider plugin.
+	KubeletServiceAccountTokenForCredentialProviders featuregate.Feature = "KubeletServiceAccountTokenForCredentialProviders"
+
 	// owner: @sallyom
 	// kep: https://kep.k8s.io/2832
 	//
diff --git a/pkg/features/versioned_kube_features.go b/pkg/features/versioned_kube_features.go
index 10faa7dc899..5e66e5aff70 100644
--- a/pkg/features/versioned_kube_features.go
+++ b/pkg/features/versioned_kube_features.go
@@ -456,6 +456,10 @@ var defaultVersionedKubernetesFeatureGates = map[featuregate.Feature]featuregate
 		{Version: version.MustParse("1.31"), Default: true, PreRelease: featuregate.Beta},
 	},
 
+	KubeletServiceAccountTokenForCredentialProviders: {
+		{Version: version.MustParse("1.33"), Default: false, PreRelease: featuregate.Alpha},
+	},
+
 	KubeletTracing: {
 		{Version: version.MustParse("1.25"), Default: false, PreRelease: featuregate.Alpha},
 		{Version: version.MustParse("1.27"), Default: true, PreRelease: featuregate.Beta},
diff --git a/test/featuregates_linter/test_data/versioned_feature_list.yaml b/test/featuregates_linter/test_data/versioned_feature_list.yaml
index 7ae7ac44cef..c57cf3b0127 100644
--- a/test/featuregates_linter/test_data/versioned_feature_list.yaml
+++ b/test/featuregates_linter/test_data/versioned_feature_list.yaml
@@ -670,6 +670,12 @@
     lockToDefault: false
     preRelease: Beta
     version: "1.31"
+- name: KubeletServiceAccountTokenForCredentialProviders
+  versionedSpecs:
+  - default: false
+    lockToDefault: false
+    preRelease: Alpha
+    version: "1.33"
 - name: KubeletTracing
   versionedSpecs:
   - default: false