apiVersion: release-notes/v2
kind: feature
area: security
issue:
  - 49913
releaseNotes:
- |

  uid: uidValue
spec:
  attachRequired: true
  fsGroupPolicy: fsGroupPolicyValue
  podInfoOnMount: true
  requiresRepublish: true
  seLinuxMount: true
  storageCapacity: true
  tokenRequests:
  - audience: audienceValue
    expirationSeconds: 2
  volumeLifecycleModes:

  uid: uidValue
spec:
  attachRequired: true
  fsGroupPolicy: fsGroupPolicyValue
  podInfoOnMount: true
  requiresRepublish: true
  seLinuxMount: true
  storageCapacity: true
  tokenRequests:
  - audience: audienceValue
    expirationSeconds: 2
  volumeLifecycleModes:

    "podInfoOnMount": true,
    "volumeLifecycleModes": [
      "volumeLifecycleModesValue"
    ],
    "storageCapacity": true,
    "fsGroupPolicy": "fsGroupPolicyValue",
    "tokenRequests": [
      {
        "audience": "audienceValue",
        "expirationSeconds": 2
      }
    ],
    "requiresRepublish": true,
    "seLinuxMount": true
  }

readme = "README.md"
requires-python = ">=3.8"
authors = [
    { name = "Sebastián Ramírez", email = "******@****.***" },
]
classifiers = [
    "Intended Audience :: Information Technology",
    "Intended Audience :: System Administrators",
    "Operating System :: OS Independent",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python",
    "Topic :: Internet",

    "podInfoOnMount": true,
    "volumeLifecycleModes": [
      "volumeLifecycleModesValue"
    ],
    "storageCapacity": true,
    "fsGroupPolicy": "fsGroupPolicyValue",
    "tokenRequests": [
      {
        "audience": "audienceValue",
        "expirationSeconds": 2
      }
    ],
    "requiresRepublish": true,
    "seLinuxMount": true
  }

        "properties": {
          "audiences": {
            "description": "Audiences are the intendend audiences of the token. A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.",

      volumes:
__EXTRA_VOLS__
        - name: konnectivity-agent-token
          projected:
            sources:
              - serviceAccountToken:
                  path: konnectivity-agent-token

				TokenRequests:     []storage.TokenRequest{{Audience: ""}},
				RequiresRepublish: &notRequiresRepublish,
			},
		},
	}, {
		desc: "valid - TokenRequests has tokens with different audience",
		csiDriver: &storage.CSIDriver{
			ObjectMeta: metav1.ObjectMeta{Name: driverName},
			Spec: storage.CSIDriverSpec{
				TokenRequests:     []storage.TokenRequest{{}, {Audience: gcp}, {Audience: aws}},

        // better than doing things in the other order, where there will be a small window where text may not be captured after prompt is fully displayed.
        // This is only a problem for tooling; for a human (the audience for this feature) this makes no difference.
        userInput.readAndForwardText(event);
        handlePrompt(event);
    }

    private void handleUserInputRequestEvent() {
        startInput();