helm/helm

Create ServiceAccountToken Template

Aperta

#12.693 aperta il 8 gen 2024

 (5 commenti) (3 reazioni) (0 assegnatari)Go (7602 fork)batch import
featurehelp wantedkeep open

Metriche repository

Star
 (29.815 stelle)
Metriche merge PR
 (Merge medio 40g 17h) (48 PR mergiate in 30 g)

Descrizione

Starting from kubernetes 1.24 ServiceAccount secrets are no longer created by default: The LegacyServiceAccountTokenNoAutoGeneration feature gate is beta, and enabled by default. When enabled, Secret API objects containing service account tokens are no longer auto-generated for every ServiceAccount. Use the TokenRequest API to acquire service account tokens, or if a non-expiring token is required, create a Secret API object for the token controller to populate with a service account token ... Currently, when helm create is used a ServiceAccount is created, but not a Secret or a TokenRequest. One needs to create a secret/tokenRequest manually.

Please add functionality to generate a Secret or TokenRequest complementary to the ServiceAccount.

Output of helm version:

version.BuildInfo{Version:"v3.12.1", GitCommit:"f32a527a060157990e2aa86bf45010dfb3cc8b8d", GitTreeState:"clean", GoVersion:"go1.20.4"}

Output of kubectl version:

WARNING: This version information is deprecated and will be replaced with the output from kubectl version --short.  Use --output=yaml|json to get the full version.
Client Version: version.Info{Major:"1", Minor:"27", GitVersion:"v1.27.3", GitCommit:"25b4e43193bcda6c7328a6d147b1fb73a33f1598", GitTreeState:"clean", BuildDate:"2023-06-14T09:53:42Z", GoVersion:"go1.20.5", Compiler:"gc", Platform:"linux/amd64"}
Kustomize Version: v5.0.1
Server Version: version.Info{Major:"1", Minor:"27", GitVersion:"v1.27.3", GitCommit:"25b4e43193bcda6c7328a6d147b1fb73a33f1598", GitTreeState:"clean", BuildDate:"2023-06-15T00:36:28Z", GoVersion:"go1.20.5", Compiler:"gc", Platform:"linux/amd64"}

Cloud Provider/Platform (AKS, GKE, Minikube etc.): N/A

Guida contributor