Kubernetes v1.35 introduces an opt-in feature for CSI drivers to receive service account tokens through a dedicated secrets field instead of the volume context. This change aims to improve security by preventing accidental logging of sensitive tokens and standardizing how they are handled. Drivers can opt-in at their own pace, ensuring backward compatibility.

Kubernetes v1.35 introduces a beta feature that allows CSI drivers to opt-in to receive service account tokens via a more secure secrets field instead of the volume context. This change aims to reduce the risk of sensitive token exposure in logs and improve consistency across drivers. Authors of CSI drivers are encouraged to adopt this feature with backward compatibility in mind.