kubernetes changedmanage-claude/wif-providers/kubernetes
Nearest release: v2.1.307, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+2added
Lines−2removed
From line
132
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits9to this page, all time
The whole hunk
from line 132, old and new numbered
/
from line 132
132132
133133 ACCESS_TOKEN=$(curl -sS https://api.anthropic.com/v1/oauth/token \
134134 -H "content-type: application/json" \
135 --data @- <<JSON | jq -r .access_token
135 -d @- <<JSON | jq -r .access_token
136136 {
137137 "grant_type": "urn:ietf:params:oauth:grant-type:jwt-bearer",
138138 "assertion": "$JWT",
from line 303
303303
304304* **Pin namespace and service-account name:** Use the full `system:serviceaccount:<namespace>:<name>` value with no trailing `*`.
305305* **Always set an audience:** Require `audience` on the rule and set the same value on the pod's `serviceAccountToken` projection so default-audience tokens are rejected.
306* **Use a separate rule per namespace:** Create a distinct rule and Anthropic service account for each namespace rather than widening one rule.
306* **Use a separate rule for each namespace:** Create a distinct rule and Anthropic service account for each namespace rather than widening one rule.
307307* **Scope inline-JWKS issuers to one cluster:** When several clusters share an issuer URL, register each cluster's JWKS as its own federation issuer and bind rules to that issuer only.
308308
309309## Next steps
No line in this hunk matches that.