Updated Kubernetes ServiceAccount Authentication (markdown)

Chris Lu committed 2026-05-27 22:30:11 -07:00
1 parent 5d49f0d8e4
commit 5c0e4ae91c
1 file changed
+2 -2
+2 -2
@@ -17,7 +17,7 @@ The result: pods authenticate to the S3 gateway with a short-lived, auto-rotated
```
Pod kube-apiserver / JWKS SeaweedFS S3 gateway
| | |
| 1. kubelet projects a SA token | |
| 1. kubelet projects a SA token | |
| (OIDC JWT, audience=X) | |
|<---------------------------------| |
| |
@@ -30,7 +30,7 @@ Pod kube-apiserver / JWKS SeaweedFS S3 gatewa
| 5. temporary {AccessKeyId, SecretAccessKey, SessionToken} |
|<-------------------------------------------------------------------|
| |
| 6. normal S3 calls signed with the temporary credentials |
| 6. normal S3 calls signed with the temporary credentials |
|------------------------------------------------------------------->|
```