Extend NodeRestriction to ServiceAccounts

vinayakankugoyal commented 3 weeks ago

One-line enhancement description (can be used as a release note): Provide a way for workloads to opt-in their service accounts to be node restricted such that the workload running with that service account can only read and update resources that are associated with the node it is running on.
Kubernetes Enhancement Proposal:
Discussion Link: https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit?tab=t.0#bookmark=id.u3dv6ikja75p
Primary contact (assignee): @vinayakankugoyal
Responsible SIGs: sig-auth
Enhancement target (which target equals to which milestone):
- Alpha release target (x.y):
- Beta release target (x.y):
- Stable release target (x.y):
[ ] Alpha
- [ ] KEP (k/enhancements) update PR(s):
- [ ] Code (k/k) update PR(s):
- [ ] Docs (k/website) update PR(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

vinayakankugoyal commented 3 weeks ago

/assign @vinayakankugoyal

vinayakankugoyal commented 3 weeks ago

/sig auth

sftim commented 3 weeks ago

/retitle Extend NodeRestriction to ServiceAccounts

kubernetes / enhancements