diff --git a/docs/book/src/topics/service-account-labels-and-annotations.md b/docs/book/src/topics/service-account-labels-and-annotations.md index 6bec14667..dcdf4f69e 100644 --- a/docs/book/src/topics/service-account-labels-and-annotations.md +++ b/docs/book/src/topics/service-account-labels-and-annotations.md @@ -19,7 +19,7 @@ The following is a list of available labels and annotations that can be used to | `azure.workload.identity/service-account-token-expiration` | **(Takes precedence if the service account is also annotated)** Represents the `expirationSeconds` field for the projected service account token. It is an optional field that the user might want to configure this to prevent any downtime caused by errors during service account token refresh. Kubernetes service account token expiry will not be correlated with AAD tokens. AAD tokens will expire in 24 hours after they are issued. | `3600` (acceptable range: `3600 - 86400`) | | `azure.workload.identity/skip-containers` | Represents a semi-colon-separated list of containers (e.g. `container1;container2`) to skip adding projected service account token volume. By default, the projected service account token volume will be added to all containers. | | | `azure.workload.identity/inject-proxy-sidecar` | Injects a proxy init container and proxy sidecar into the pod. The proxy sidecar is used to intercept token requests to IMDS and acquire an AAD token on behalf of the user with federated identity credential. | `true` | -| `azure.workload.identity/proxy-sidecar-port` | Represents the port of the proxy sidecar. | `8080` | +| `azure.workload.identity/proxy-sidecar-port` | Represents the port of the proxy sidecar. | `8000` | ## Service Account