Absolutely loving the functionality KEP-4412 brings to kubernetes.

Having the pods service account token passed to the credential provider allows for seamless authentication with private registries.

Before you either had to use the node identity which in some cases isn’t oidc based or create a bunch of imagePullSecrets.

Code and walkthrough at https://github.com/cloudsmith-io/cloudsmith-kubernetes-crede...