Skip to content

Remove mentions of the k8s_sat node attestor #326

Merged
mchurichi merged 3 commits intospiffe:masterfrom
sorindumitru:k8s-psat
May 19, 2025
Merged

Remove mentions of the k8s_sat node attestor #326
mchurichi merged 3 commits intospiffe:masterfrom
sorindumitru:k8s-psat

Conversation

@sorindumitru
Copy link
Contributor

Description of the change

The k8s_sat node attestor has been deprecated for a few releases and will be removed in 1.12.0. This remove the usage of it found in on spiffe.io.

This should only be merged after spiffe/spire-tutorials#140 gets merged.

Which issue this PR fixes
fixes #325

@netlify
Copy link

netlify bot commented Jan 18, 2025

Deploy Preview for spiffe ready!

Name Link
🔨 Latest commit 7879df1
🔍 Latest deploy log https://app.netlify.com/projects/spiffe/deploys/682b5e6e2244ab0008bfafc9
😎 Deploy Preview https://deploy-preview-326--spiffe.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@sorindumitru sorindumitru force-pushed the k8s-psat branch 2 times, most recently from f8175f6 to ede86d9 Compare March 20, 2025 20:32
Copy link

@sanderson042 sanderson042 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the term "Service Account Token" still ok to use as a general term or should those all now be "Projected Service Account Token"? Just in case, I've listed some cases where "Service Account Token" is used.

configuring.md:
Line 68

spire-about/spire-concepts.md:
line 144
line 172
line 189

@sorindumitru
Copy link
Contributor Author

configuring.md: Line 68

spire-about/spire-concepts.md: line 144 line 172 line 189

Thanks again for the review. I think these should be ok, both PSAT and SATs are service account tokens, I think it's more about how they are delivered to the application. The Projected kind allows for shorter lifetimes.

Happy to changes those to say "projected service accounts", but I think there shouldn't be any confusion as they are.

Copy link

@sanderson042 sanderson042 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi Sorin, thanks for responding to my question about existing uses of "service account tokens." Your recommendation to leave the existing text as-is seems fine. I'm approving this PR.

@donaldh
Copy link

donaldh commented May 19, 2025

It would be great to get this PR merged because the docs on spiffe.io don't work with spire-tutorials/k8s/quickstart.

Signed-off-by: Sorin Dumitru <sorin@returnze.ro>
We now have the helm charts documented on the site, they are going to be a much better choice for production.

Signed-off-by: Sorin Dumitru <sorin@returnze.ro>
Signed-off-by: Sorin Dumitru <sorin@returnze.ro>
@mchurichi mchurichi merged commit 8b01697 into spiffe:master May 19, 2025
5 checks passed
@sorindumitru
Copy link
Contributor Author

Thanks @donaldh for reminding me about this, I forgot it didn't get merged

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Replace usage of k8s_sat node attestation with k8s_psat node attestation

4 participants