Skip to content

Commit ef15bb7

Browse files
authored
1 parent f59b642 commit ef15bb7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/aks/workload-identity-overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ If you've used [Azure AD pod-managed identity][use-azure-ad-pod-identity], think
103103
|`azure.workload.identity/service-account-token-expiration` |Represents the `expirationSeconds` field for the projected service account token. It's an optional field that you configure to prevent any downtime caused by errors during service account token refresh. Kubernetes service account token expiry isn't correlated with Azure AD tokens. Azure AD tokens expire in 24 hours after they're issued. <sup>1</sup> |3600<br> Supported range is 3600-86400. |
104104
|`azure.workload.identity/skip-containers` |Represents a semi-colon-separated list of containers to skip adding projected service account token volume. For example `container1;container2`. |By default, the projected service account token volume is added to all containers if the service account is labeled with `azure.workload.identity/use: true`. |
105105
|`azure.workload.identity/inject-proxy-sidecar` |Injects a proxy init container and proxy sidecar into the pod. The proxy sidecar is used to intercept token requests to IMDS and acquire an Azure AD token on behalf of the user with federated identity credential. |true |
106-
|`azure.workload.identity/proxy-sidecar-port` |Represents the port of the proxy sidecar. |8080 |
106+
|`azure.workload.identity/proxy-sidecar-port` |Represents the port of the proxy sidecar. |8000 |
107107

108108
<sup>1</sup> Takes precedence if the service account is also annotated.
109109

0 commit comments

Comments
 (0)