mirror of https://github.com/k3s-io/k3s
513e67ac02
Automatic merge from submit-queue (batch tested with PRs 59365, 60446, 60448, 55019, 60431). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. auth: allow nodes to create tokens for svcaccts of pods ref https://github.com/kubernetes/kubernetes/issues/58790 running on them. nodes essentially have the power to do this today but not explicitly. this allows agents using the node identity to take actions on behalf of local pods. @kubernetes/sig-auth-pr-reviews @smarterclayton ```release-note The node authorizer now allows nodes to request service account tokens for the service accounts of pods running on them. ``` |
||
|---|---|---|
| .. | ||
| authenticator/token/bootstrap | ||
| authorizer | ||
| BUILD | ||
| OWNERS | ||
| doc.go | ||