Skip to content

Commit 8c7d4c2

Browse files
authored
Added Documents for kubernetes.io/enforce-mountable-secrets. (#31864)
* Added Documents for kubernetes.io/enforce-mountable-secrets. * Modified the enforce-mountable-secrets docs.
1 parent dea4f2b commit 8c7d4c2

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

content/en/docs/reference/labels-annotations-taints.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,14 @@ Used on: All Objects
8080

8181
This annotation is used for describing specific behaviour of given object.
8282

83+
## kubernetes.io/enforce-mountable-secrets {#enforce-mountable-secrets}
84+
85+
Example: `kubernetes.io/enforce-mountable-secrets: "true"`
86+
87+
Used on: ServiceAccount
88+
89+
The value for this annotation must be **true** to take effect. This annotation indicates that pods running as this service account may only reference Secret API objects specified in the service account's `secrets` field.
90+
8391
## controller.kubernetes.io/pod-deletion-cost {#pod-deletion-cost}
8492

8593
Example: `controller.kubernetes.io/pod-deletion-cost=10`

0 commit comments

Comments
 (0)