From 4dc0dc95eb7b9e3891940ed6f3b6f7766450df1d Mon Sep 17 00:00:00 2001 From: Matheus Pimenta Date: Thu, 22 Oct 2026 20:20:51 +0100 Subject: [PATCH] [RFC-0014] auth: improve retirement reason for the feature gate Signed-off-by: Matheus Pimenta --- auth/feature_gates.go | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/auth/feature_gates.go b/auth/feature_gates.go index f2519ab2b..f4045419c 100644 --- a/auth/feature_gates.go +++ b/auth/feature_gates.go @@ -23,5 +23,7 @@ const FeatureGateObjectLevelWorkloadIdentity = "ObjectLevelWorkloadIdentity" // FeatureGateObjectLevelWorkloadIdentityRetirementReason provides the reason why the // ObjectLevelWorkloadIdentity feature gate is retired. -const FeatureGateObjectLevelWorkloadIdentityRetirementReason = "the feature is now always enabled. " + - "make sure to grant RBAC for the controller to create ServiceAccount tokens if using the feature." +const FeatureGateObjectLevelWorkloadIdentityRetirementReason = "starting with Flux 2.10, the feature is now always enabled. " + + "make sure to grant the 'create' RBAC verb for the 'serviceaccounts/token' " + + "resource in a ClusterRoleBinding for the controller ServiceAccount to use " + + "the feature."