From 560bf1d9f1b62424aa510668a3d84b0e8100561d Mon Sep 17 00:00:00 2001 From: Anish Ramasekar Date: Tue, 25 Mar 2025 17:30:42 -0700 Subject: [PATCH] clarify mutual exclusivity of service account annotation keys in godoc Signed-off-by: Anish Ramasekar Kubernetes-commit: f7e82d8059d29a279740a03ca2d9a76615632d5d --- config/v1/types.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/v1/types.go b/config/v1/types.go index 4999765..ffcf1f6 100644 --- a/config/v1/types.go +++ b/config/v1/types.go @@ -134,6 +134,8 @@ type ServiceAccountTokenAttributes struct { // additional information required to fetch credentials or allow workloads to opt in to // using service account tokens for image pull. // If non-empty, requireServiceAccount must be set to true. + // Keys in this list must be unique. + // This list needs to be mutually exclusive with optionalServiceAccountAnnotationKeys. // +optional // +listType=set RequiredServiceAccountAnnotationKeys []string `json:"requiredServiceAccountAnnotationKeys,omitempty"` @@ -145,6 +147,7 @@ type ServiceAccountTokenAttributes struct { // the existence of annotations and their values. // This field is optional and may be empty. Plugins may use this field to extract // additional information required to fetch credentials. + // Keys in this list must be unique. // +optional // +listType=set OptionalServiceAccountAnnotationKeys []string `json:"optionalServiceAccountAnnotationKeys,omitempty"`