bank-vaults / vault-operator

Kubernetes operator for Hashicorp Vault
https://bank-vaults.dev/docs/operator/
Apache License 2.0
53 stars 21 forks source link

fix: Add a tokenreviews role to the leader-election-role #471

Closed JonTheNiceGuy closed 1 month ago

JonTheNiceGuy commented 1 month ago

Overview

With Kubernetes 1.24 and later, short-lived tokens are now a "thing". This change allows the leader-election role to conduct token reviews in line with the advice on this page

Notes for reviewer

Without this, you may see errors like this: cannot create resource "tokenreviews" in API group (see this KB article too)