Loading...

XML

Word

Printable

Type: Feature Request
Resolution: Done
Priority: Critical
Fix Version/s: None
Affects Version/s: None
Component/s: None
Labels:
None

Blocked:
False
Blocked Reason:
None
Ready:
False
Color Status:
Not Selected
Intelligence Requested:
Market:
PX Impact Score:
PX Priority Data:
PX Review Complete:
Target Version:

openshift-4.15

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Description of problem:

Even though in 4.11 we introduced LegacyServiceAccountTokenNoAutoGeneration to be compatible with upstream K8s to not generate secrets with tokens when service accounts are created, today OpenShift still creates secrets and tokens that are used for legacy usage of openshift-controller as well as the image-pull secrets.

Customer issues:

Customers see auto-generated secrets for service accounts which is flagged as a security risk.

This RFE is to track the feature for removing legacy usage and image-pull secret generation as well so that NO secrets are auto-generated when a Service Account is created on OpenShift cluster.

relates to

OCPSTRAT-890 No auto-generation of service account secrets

In Progress

OCPSTRAT-242 No auto-generated secrets for SA when Registry is disabled

Closed

Assignee:: Stanislav Láznička

Reporter:: Michal Fojtik

QA Contact:: Giriyamma Karagere Ramaswamy (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2023/01/11 1:48 PM

Updated:: 2023/11/07 4:58 PM

Resolved:: 2023/05/25 2:41 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates

Hide