Service Account Token Volumes

Enhancement Description

• One-line enhancement description (can be used as a release note): Service Account Token Volumes
• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/tree/master/keps/sig-storage/2451-service-account-token-volumes

Kubernetes is able to provide pods with unique identity tokens that can prove
the caller is a particular pod to a Kubernetes API server. These tokens are
injected into pods as secrets. This proposal proposes a new mechanism of
distribution with support for improved service account tokens and explores how
to migrate from the existing mechanism backwards compatibly.

• Discussion Link:
• Primary contact (assignee): @smarterclayton @liggitt @mikedanese @zshihang
• Responsible SIGs: sig-storage
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y):
  • Beta release target (x.y):
  • Stable release target (x.y):
• Alpha
  • KEP (k/enhancements) update PR(s):
  • Code (k/k) update PR(s):
  • Docs (k/website) update PR(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

Migrating all the old template keps to new template : #2452

[zshihang]

/close because it is replaced by #542

and the KEP is merged: #2663

[zshihang]

/close

[k8s-ci-robot]

@zshihang: Closing this issue.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.