Merge pull request #131061 from aramase/aramase/c/kep_4412_add_unique_req

clarify mutual exclusivity of service account annotation keys in godoc

Kubernetes-commit: ea04d665dade19bdfa548b1257b58f80e36e4e17
This commit is contained in:
Kubernetes Publisher 2025-04-23 15:59:06 -07:00
commit 0f989a9793
1 changed files with 3 additions and 0 deletions

View File

@ -134,6 +134,8 @@ type ServiceAccountTokenAttributes struct {
// additional information required to fetch credentials or allow workloads to opt in to
// using service account tokens for image pull.
// If non-empty, requireServiceAccount must be set to true.
// Keys in this list must be unique.
// This list needs to be mutually exclusive with optionalServiceAccountAnnotationKeys.
// +optional
// +listType=set
RequiredServiceAccountAnnotationKeys []string `json:"requiredServiceAccountAnnotationKeys,omitempty"`
@ -145,6 +147,7 @@ type ServiceAccountTokenAttributes struct {
// the existence of annotations and their values.
// This field is optional and may be empty. Plugins may use this field to extract
// additional information required to fetch credentials.
// Keys in this list must be unique.
// +optional
// +listType=set
OptionalServiceAccountAnnotationKeys []string `json:"optionalServiceAccountAnnotationKeys,omitempty"`