helm/helm

Create ServiceAccountToken Template

Aberta

#12.693 aberto em 8 de jan. de 2024

 (5 comentários) (3 reações) (0 responsável)Go (7.602 forks)batch import
featurehelp wantedkeep open

Métricas do repositório

Stars
 (29.815 estrelas)
Métricas de merge de PR
 (Mesclagem média 40d 17h) (48 fundiu PRs em 30d)

Description

Starting from kubernetes 1.24 ServiceAccount secrets are no longer created by default: The LegacyServiceAccountTokenNoAutoGeneration feature gate is beta, and enabled by default. When enabled, Secret API objects containing service account tokens are no longer auto-generated for every ServiceAccount. Use the TokenRequest API to acquire service account tokens, or if a non-expiring token is required, create a Secret API object for the token controller to populate with a service account token ... Currently, when helm create is used a ServiceAccount is created, but not a Secret or a TokenRequest. One needs to create a secret/tokenRequest manually.

Please add functionality to generate a Secret or TokenRequest complementary to the ServiceAccount.

Output of helm version:

version.BuildInfo{Version:"v3.12.1", GitCommit:"f32a527a060157990e2aa86bf45010dfb3cc8b8d", GitTreeState:"clean", GoVersion:"go1.20.4"}

Output of kubectl version:

WARNING: This version information is deprecated and will be replaced with the output from kubectl version --short.  Use --output=yaml|json to get the full version.
Client Version: version.Info{Major:"1", Minor:"27", GitVersion:"v1.27.3", GitCommit:"25b4e43193bcda6c7328a6d147b1fb73a33f1598", GitTreeState:"clean", BuildDate:"2023-06-14T09:53:42Z", GoVersion:"go1.20.5", Compiler:"gc", Platform:"linux/amd64"}
Kustomize Version: v5.0.1
Server Version: version.Info{Major:"1", Minor:"27", GitVersion:"v1.27.3", GitCommit:"25b4e43193bcda6c7328a6d147b1fb73a33f1598", GitTreeState:"clean", BuildDate:"2023-06-15T00:36:28Z", GoVersion:"go1.20.5", Compiler:"gc", Platform:"linux/amd64"}

Cloud Provider/Platform (AKS, GKE, Minikube etc.): N/A

Guia do colaborador