-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.20
-
None
-
Quality / Stability / Reliability
-
False
-
-
None
-
Moderate
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
1. As the BoundServiceAccountTokenVolume featureGate is enabled in Kubernetes v1.22 2. with this PR https://github.com/openshift/kubernetes/pull/714, ocp will inject the service-ca.crt into the token 3. there is no need to bound the kube-root-ca.crt cm into the kube-api-access, the auto-generated kube-api-access-xxx also has the kube-root-ca.crt now
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1. 2. 3.
Actual results:
Expected results:
Additional info: