Skip to content

Commit a872b99

Browse files
authored
Merge pull request #45253 from yt2985/stable-feature
Revise the feature gate LegacyServiceAccountTokenCleanUp to stable stage
2 parents 7275d2c + 9c04fe6 commit a872b99

File tree

2 files changed

+9
-7
lines changed

2 files changed

+9
-7
lines changed

content/en/docs/reference/command-line-tools-reference/feature-gates/legacy-service-account-token-clean-up.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ stages:
1313
- stage: beta
1414
defaultValue: true
1515
fromVersion: "1.29"
16+
toVersion: "1.29"
17+
- stage: stable
18+
defaultValue: true
19+
fromVersion: "1.30"
1620
---
1721
Enable cleaning up Secret-based
1822
[service account tokens](/docs/concepts/security/service-accounts/#get-a-token)

content/en/docs/reference/labels-annotations-taints/_index.md

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1105,13 +1105,11 @@ Example: `kubernetes.io/legacy-token-invalid-since: 2023-10-27`
11051105
Used on: Secret
11061106

11071107
The control plane automatically adds this label to auto-generated Secrets that
1108-
have the type `kubernetes.io/service-account-token`, provided that you have the
1109-
`LegacyServiceAccountTokenCleanUp` [feature gate](/docs/reference/command-line-tools-reference/feature-gates/)
1110-
enabled. Kubernetes {{< skew currentVersion >}} enables that behavior by default.
1111-
This label marks the Secret-based token as invalid for authentication. The value
1112-
of this label records the date (ISO 8601 format, UTC time zone) when the control
1113-
plane detects that the auto-generated Secret has not been used for a specified
1114-
duration (defaults to one year).
1108+
have the type `kubernetes.io/service-account-token`. This label marks the
1109+
Secret-based token as invalid for authentication. The value of this label
1110+
records the date (ISO 8601 format, UTC time zone) when the control plane detects
1111+
that the auto-generated Secret has not been used for a specified duration
1112+
(defaults to one year).
11151113

11161114
### endpointslice.kubernetes.io/managed-by {#endpointslicekubernetesiomanaged-by}
11171115

0 commit comments

Comments
 (0)