From 8e939943f89f4e76164a4fa994809bb3f60d94cd Mon Sep 17 00:00:00 2001 From: Daniel Hougaard Date: Sat, 8 Nov 2025 07:28:49 +0400 Subject: [PATCH] Update kubernetes-injector.mdx --- docs/integrations/platforms/kubernetes-injector.mdx | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/integrations/platforms/kubernetes-injector.mdx b/docs/integrations/platforms/kubernetes-injector.mdx index 06e1c2125..9903dcbc3 100644 --- a/docs/integrations/platforms/kubernetes-injector.mdx +++ b/docs/integrations/platforms/kubernetes-injector.mdx @@ -148,7 +148,8 @@ The entire config needs to be of string format and needs to be assigned to the ` Whether to revoke all managed dynamic secret leases and identity access tokens on shutdown. Default: `"false"`. - If this is set to `true`, all managed dynamic secret leases and identity access tokens will be revoked when the pod is deleted. + If this is set to `true`, all managed dynamic secret leases and identity access tokens will be revoked when a `SIGTERM` signal is sent to the agents container _(such as when a pod is terminated or when the pod is restarted)_. + **Note:** In disaster events such as cluster power outages, a `SIGTERM` signal won't be sent to the agents container, and the credentials will not be revoked. Note that this is currently unsupported on Windows-based pods, and will only work when injecting into Linux-based pods.