Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

rbd: k8s 1.24 changes wrt to sa secrets may affect vault tenant sa encryption. #3135

Closed
Rakshith-R opened this issue May 26, 2022 · 0 comments · Fixed by #3174
Closed

rbd: k8s 1.24 changes wrt to sa secrets may affect vault tenant sa encryption. #3135

Rakshith-R opened this issue May 26, 2022 · 0 comments · Fixed by #3174
Assignees
@Rakshith-R
Labels
component/rbd Issues related to RBD

Comments

@Rakshith-R
Copy link
Contributor

From k8s 1.24 release notes

The LegacyServiceAccountTokenNoAutoGeneration feature gate is beta, and enabled by default. When enabled, Secret API objects containing service account tokens are no longer auto-generated for every ServiceAccount. Use the TokenRequest API to acquire service account tokens, or if a non-expiring token is required, create a Secret API object for the token controller to populate with a service account token by following this guide. (kubernetes/kubernetes#108309)

We may have to implement another extra step to use this instead

kubectl create token can now be used to request a service account token, and permission to request service account tokens is added to the edit and admin RBAC roles (kubernetes/kubernetes#107880, @liggitt)

I'll update the issue after testing with k8s 1.24
@Rakshith-R Rakshith-R added the component/rbd Issues related to RBD label May 26, 2022
@Rakshith-R Rakshith-R self-assigned this May 26, 2022
@humblec humblec added this to the release-3.7 milestone May 26, 2022
@Rakshith-R Rakshith-R mentioned this issue Jun 13, 2022
Merged
@Rakshith-R Rakshith-R removed this from the release-3.7 milestone Jun 15, 2022
@mergify mergify bot closed this as completed in #3174 Jun 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Rakshith-R Rakshith-R

Labels
component/rbd Issues related to RBD
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

rbd: create token and use it for vault SA Rakshith-R/ceph-csi
2 participants
@humblec @Rakshith-R