8000 Backport: [user-authn] Add ServiceAccount to templates by deckhouse-BOaTswain · Pull Request #13221 · deckhouse/deckhouse · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Backport: [user-authn] Add ServiceAccount to templates #13221

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 25, 2025
Merged

Backport: [user-authn] Add ServiceAccount to templates #13221

merged 1 commit into from
Apr 25, 2025

Conversation

deckhouse-BOaTswain
Copy link
Collaborator

Description

Add separate ServiceAccount to basic-auth-proxy template

Why do we need it, and what problem does it solve?

According to CIS 5.1.5, default service account should not be used for Kubernetes API access

Why do we need it in the patch release (if we do)?

In v1.69 basic-auth-proxy fails to start, this changes will fix it.

Checklist

  • The code is covered by unit tests.
  • e2e tests passed.
  • Documentation updated according to the changes.
  • Changes were tested in the Kubernetes cluster manually.

Changelog entries

section: user-authn
type: fix
summary: Add separate ServiceAccount to basic-auth-proxy.
impact_level: default

@YuryLysov @z9r5
[user-authn] Add ServiceAccount to templates (#13214)
235b957 
Signed-off-by: YuryLysov <yuriy.lysov@flant.com>
@deckhouse-BOaTswain deckhouse-BOaTswain merged commit f2954e5 into release-1.69 Apr 25, 2025
@deckhouse-BOaTswain deckhouse-BOaTswain deleted the cherry-pick-release-1.69-46ebf4b07f26f4d53f31b648fd88c843e3dcfa26 branch April 25, 2025 09:56
@deckhouse-BOaTswain deckhouse-BOaTswain mentioned this pull request Apr 25, 2025
Merged
4 tasks
@github-actions github-actions bot added area/auth Pull requests that update auth modules area/cluster-and-infrastructure Pull requests that update infra modules go Pull requests that update Go code labels Apr 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nabokihms nabokihms Awaiting requested review from nabokihms nabokihms is a code owner

@name212 name212 Awaiting requested review from name212 name212 is a code owner

@sprait sprait Awaiting requested review from sprait sprait is a code owner

Assignees

@deckhouse-BOaTswain deckhouse-BOaTswain

Labels
area/auth Pull requests that update auth modules area/cluster-and-infrastructure Pull requests that update infra modules auto backported go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@deckhouse-BOaTswain @YuryLysov
0