openshift/openshift-docs
1
0
Fork 0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 21:46:22 +01:00
Code Issues Releases Activity

OSDOCS#10143: Release note for no longer generating legacy SA token secrets

Browse Source
This commit is contained in:
Andrea Hoffer
2024-05-09 14:43:34 -04:00
parent 14ca19ddef
commit decd2a87ea
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
release_notes/ocp-4-16-release-notes.adoc
View File

@@ -307,7 +307,7 @@ For more information, see xref:../edge_computing/cnf-talm-for-cluster-upgrades.a
[discrete]
[id="ocp-4-16-HAProxy-version_{context}"]
=== HAProxy version 2.8
=== HAProxy version 2.8
{product-title} {product-version} uses HAProxy 2.8.
@@ -353,6 +353,18 @@ This API still streamlines management of installed extensions, which includes Op
* Better represents a more flexible packaging format
* `Cluster` prefix clearly indicates that `ClusterExtension` objects are cluster-scoped, a change from {olmv0} where Operators could be either namespace-scoped or cluster-scoped
[discrete]
[id="ocp-4-16-legacy-sa-tokens_{context}"]
=== Legacy service account API token secrets are no longer generated for each service account
Prior to {product-title} 4.16, when the integrated {product-registry} was enabled, a legacy service account API token secret was generated for every service account in the cluster. Starting with {product-title} 4.16, when the integrated {product-registry} is enabled, the legacy service account API token secret is no longer generated for each service account.
Additionally, when the integrated {product-registry} is enabled, the image pull secret generated for every service account no longer uses a legacy service account API token. Instead, the image pull secret now uses a bound service account token that is automatically refreshed before it expires.
For more information, see xref:../nodes/pods/nodes-pods-secrets.adoc#auto-generated-sa-token-secrets_nodes-pods-secrets[Automatically generated image pull secrets].
For information about detecting legacy service account API token secrets that are in use in your cluster or deleting them if they are not needed, see the Red Hat Knowledgebase article link:https://access.redhat.com/articles/7058801[Long-lived service account API tokens in OpenShift Container Platform].
[id="ocp-4-16-deprecated-removed-features_{context}"]
== Deprecated and removed features