From 8c7d4c2ae2624e3e11be43277f8ba604a96612ac Mon Sep 17 00:00:00 2001 From: Shubham Date: Mon, 28 Feb 2022 07:36:56 +0530 Subject: [PATCH] Added Documents for kubernetes.io/enforce-mountable-secrets. (#31864) * Added Documents for kubernetes.io/enforce-mountable-secrets. * Modified the enforce-mountable-secrets docs. --- content/en/docs/reference/labels-annotations-taints.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/content/en/docs/reference/labels-annotations-taints.md b/content/en/docs/reference/labels-annotations-taints.md index 453e50fee0..74e90c2c1a 100644 --- a/content/en/docs/reference/labels-annotations-taints.md +++ b/content/en/docs/reference/labels-annotations-taints.md @@ -80,6 +80,14 @@ Used on: All Objects This annotation is used for describing specific behaviour of given object. +## kubernetes.io/enforce-mountable-secrets {#enforce-mountable-secrets} + +Example: `kubernetes.io/enforce-mountable-secrets: "true"` + +Used on: ServiceAccount + +The value for this annotation must be **true** to take effect. This annotation indicates that pods running as this service account may only reference Secret API objects specified in the service account's `secrets` field. + ## controller.kubernetes.io/pod-deletion-cost {#pod-deletion-cost} Example: `controller.kubernetes.io/pod-deletion-cost=10`