Merge pull request #49413 from liggitt/4193-ga

KEP-4193: 1.33 updates for ServiceAccountTokenNodeBinding GA

Author: k8s-ci-robot

content/en/docs/reference/access-authn-authz/service-accounts-admin.md

@@ -69,7 +69,7 @@ Supported object types are as follows:
 
 * Pod (used for projected volume mounts, see below)
 * Secret (can be used to allow revoking a token by deleting the Secret)
-* Node (in v1.32, creating new node-bound tokens is beta, using existing node-bound tokens is GA)
+* Node (can be used to auto-revoke a token when its Node is deleted; creating new node-bound tokens is GA in v1.33+)
 
 When a token is bound to an object, the object's `metadata.name` and `metadata.uid` are
 stored as extra 'private claims' in the issued JWT.

content/en/docs/reference/command-line-tools-reference/feature-gates/ServiceAccountTokenNodeBinding.md

@@ -13,5 +13,9 @@ stages:
   - stage: beta
     defaultValue: true
     fromVersion: "1.31"
+    toVersion: "1.32"
+  - stage: stable
+    defaultValue: true
+    fromVersion: "1.33"
 ---
 Controls whether the API server allows binding service account tokens to Node objects.