Anish Ramasekar 45dfb46448 Add TokenRequestServiceAccountUIDValidation feature gate with UID validation ...

This change introduces the TokenRequestServiceAccountUIDValidation feature
gate and implements feature-gated service account UID validation for the
TokenRequest API. When enabled, the API validates that the service account
UID in token requests matches the actual service account UID, preventing
token requests for recreated service accounts with the same name but
different UIDs.

Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>

2025-07-10 23:20:23 -05:00

..

testdata

…

accessreview_test.go

pkg/controlplane: split up config into generic controlplane and kube-related part

2024-04-26 14:14:06 +02:00

auth_test.go

Drop null creationTimestamp from test fixtures

2025-05-02 15:38:40 -04:00

authz_config_test.go

KEP-3221: Promote StructuredAuthorizationConfiguration to GA

2024-10-17 21:53:45 -04:00

bootstraptoken_test.go

pkg/controlplane: split up config into generic controlplane and kube-related part

2024-04-26 14:14:06 +02:00

dynamic_client_test.go

test: use cancelation from ktesting

2024-03-01 07:51:22 +01:00

main_test.go

Enforce sa token node audience restriction when ServiceAccountNodeAudienceRestriction=true

2024-11-06 09:51:40 -08:00

node_test.go

chore: depr. pointer pkg replacement for test integration

2025-07-06 22:02:04 +02:00

podsecurity_test.go

Add ut coverage for capabilities.Setup (#125395)

2024-10-17 18:23:03 +01:00

rbac_test.go

add statusz implementation and enablement in apiserver

2024-11-07 12:37:38 -08:00

requestheader_test.go

Update tests to handle RemoteRequestHeaderUID

2024-12-04 16:04:36 -05:00

selfsubjectreview_test.go

Fix SelfSubjectReview test to decouple beta and GA types from the same apiserver

2025-02-20 19:32:16 +00:00

svcaccttoken_test.go

Add TokenRequestServiceAccountUIDValidation feature gate with UID validation

2025-07-10 23:20:23 -05:00