-
Notifications
You must be signed in to change notification settings - Fork 3.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Add support to auto-mount service account tokens for plugins. #8176
Conversation
Signed-off-by: Alex Collins <alex_collins@intuit.com>
Signed-off-by: Alex Collins <alex_collins@intuit.com>
Signed-off-by: Alex Collins <alex_collins@intuit.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good. I'd recommend adding some docs: 1) why/how to use this and 2) "please please please only do this if necessary and then limit permissions carefully".
will this be merged at v3.3.2? |
…rgoproj#8176) Signed-off-by: Alex Collins <alex_collins@intuit.com>
why this feature note picked in v3.3.2 or 3.3.3 waiting for long times. because my volcano plugin rely on it. @sarabala1979 |
…rgoproj#8176) Signed-off-by: Alex Collins <alex_collins@intuit.com>
…8176) Signed-off-by: Alex Collins <alex_collins@intuit.com>
Signed-off-by: Alex Collins alex_collins@intuit.com
Users have requested a couple of times the ability to access the Kuberenetes API. This uses the same pattern as PodSpec.AutomountServiceAccountToken, but the name of the service account is fixed.