Secret documentation references unimplemented feature

[JacobHenner]

This is a Bug Report

Problem: It appears as if the Secret documentation references a feature that isn't currently implemented. Specifically, it includes the following:

Manually created secrets (for example, one containing a token for accessing a GitHub account) can be automatically attached to pods based on their service account.

Prior to #26027 this was accompanied by the text:

See Injecting Information into Pods Using a PodPreset for a detailed explanation of that process.

However, PodPresets have been dropped from Kubernetes.

Accordingly, this section should reference a different mechanism to achieve the same goal if such a mechanism exists. If it doesn't it should be dropped.

From my research, it looks like no such alternate mechanism exists. In another previous revision of that section, the section read:

We plan to extend the service account behavior so that manually created secrets (e.g. one containing a token for accessing a github account) can be automatically attached to pods based on their service account. This is not implemented yet. See issue 9902.

kubernetes/kubernetes#9902 states that PodPresets should be used for secret automounting. It does not mention other options. It also does not imply that ServiceAccounts are relevant. It seems like the ServiceAccount association was an unimplemented or reconsidered proposal back around 2015-2017.

Proposed Solution: Unless a mechanism exists which associates Secrets with ServiceAccounts for the purpose of automounting Secrets in Pods associated with a specific ServiceAccount, this section should be dropped. If such a mechanism does exist, the section should be updated to reflect its use or refer to other docs that do.

Page to Update:
https://kubernetes.io/docs/concepts/configuration/secret/#automatic-mounting-of-manually-created-secrets

[sftim]

/kind bug
Relevant SIG is SIG Service Catalog, but anyone can tidy up (remove the mention of PodPreset).

/triage accepted
/language en
/help

[k8s-ci-robot]

@sftim:
This request has been marked as needing help from a contributor.

Please ensure the request meets the requirements listed here.

If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.

In response to this:

/kind bug
Relevant SIG is SIG Service Catalog, but anyone can tidy up (remove the mention of PodPreset).

/triage accepted
/language en
/help

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.