feat(k8s): automatic service account token creation for k8s auth

2026-10-07 14:27:30 +00:00 · 2025-04-01 23:39:22 +04:00
parent 82b828c10e
commit 3d072c2f48
5 changed files with 73 additions and 5 deletions
@@ -16,6 +16,13 @@ rules:
  - list
  - update
  - watch
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  verbs:
+  - get
+  - list
 - apiGroups:
  - ""
  resources:
@@ -35,6 +42,12 @@ rules:
  - get
  - list
  - watch
+- apiGroups:
+  - ""
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
 - apiGroups:
  - apps
  resources:
@@ -55,6 +68,12 @@ rules:
  - list
  - update
  - watch
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
 - apiGroups:
  - secrets.infisical.com
  resources: