Extend NodeRestriction to ServiceAccounts

[vinayakankugoyal]

Enhancement Description

• One-line enhancement description (can be used as a release note): Provide a way for workloads to opt-in their service accounts to be node restricted such that the workload running with that service account can only read and update resources that are associated with the node it is running on.
• Kubernetes Enhancement Proposal:
• Discussion Link: https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit?tab=t.0#bookmark=id.u3dv6ikja75p
• Primary contact (assignee): @vinayakankugoyal
• Responsible SIGs: sig-auth
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y):
  • Beta release target (x.y):
  • Stable release target (x.y):
• Alpha
  • KEP (k/enhancements) update PR(s):
  • Code (k/k) update PR(s):
  • Docs (k/website) update PR(s):

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

[vinayakankugoyal]

/assign @vinayakankugoyal

[vinayakankugoyal]

/sig auth

[sftim]

/retitle Extend NodeRestriction to ServiceAccounts