b7dd46c4e6
This patchset introduces airshipctl command - airshipctl cluster rotate-sa-token which basically rotates SA tokens Previous work: https://review.opendev.org/#/c/749470/ Change-Id: Ibe932fa8d2831979e5b2ac2781f746e8ec2fdc3c
26 lines
593 B
YAML
26 lines
593 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: valid-pod
|
|
namespace: valid-namespace
|
|
ownerReferences:
|
|
- apiVersion: apps/v1
|
|
blockOwnerDeletion: true
|
|
controller: true
|
|
kind: ReplicaSet
|
|
name: valid-pod-rs
|
|
spec:
|
|
containers:
|
|
- image: pod-image
|
|
volumeMounts:
|
|
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
|
|
name: valid-secret
|
|
readOnly: true
|
|
serviceAccount: valid-serviceaccount
|
|
serviceAccountName: valid-serviceaccount
|
|
volumes:
|
|
- name: valid-secret
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: valid-secret
|