{"record":{"id":"29ef1f05766ea358","repo":"dapr/dapr","slug":"kubernetes-io-pod-name-claim-is-missing-from-kuber","errorCode":null,"errorMessage":"kubernetes.io/pod/name claim is missing from Kubernetes token","messagePattern":"kubernetes\\.io/pod/name claim is missing from Kubernetes token","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/sentry/server/validator/kubernetes/kubernetes.go","lineNumber":51,"sourceCode":"\t\"sigs.k8s.io/controller-runtime/pkg/cache\"\n\t\"sigs.k8s.io/controller-runtime/pkg/client\"\n\n\tconfigv1alpha1 \"github.com/dapr/dapr/pkg/apis/configuration/v1alpha1\"\n\t\"github.com/dapr/dapr/pkg/healthz\"\n\t\"github.com/dapr/dapr/pkg/injector/annotations\"\n\tinjectorConsts \"github.com/dapr/dapr/pkg/injector/consts\"\n\tsentryv1pb \"github.com/dapr/dapr/pkg/proto/sentry/v1\"\n\t\"github.com/dapr/dapr/pkg/security/consts\"\n\t\"github.com/dapr/dapr/pkg/sentry/server/images\"\n\t\"github.com/dapr/dapr/pkg/sentry/server/validator\"\n\t\"github.com/dapr/dapr/pkg/sentry/server/validator/internal\"\n\t\"github.com/dapr/kit/logger\"\n)\n\nvar (\n\tlog = logger.NewLogger(\"dapr.sentry.identity.kubernetes\")\n\n\terrMissingPodClaim = errors.New(\"kubernetes.io/pod/name claim is missing from Kubernetes token\")\n)\n\nconst (\n\t// TODO: @joshvanl: Before 1.12, dapr would use this generic audience. After\n\t// 1.13, clients use the sentry SPIFFE ID as the audience. Remove this\n\t// constant in 1.14.\n\tLegacyServiceAccountAudience = \"dapr.io/sentry\"\n)\n\ntype Options struct {\n\tRestConfig     *rest.Config\n\tSentryID       spiffeid.ID\n\tControlPlaneNS string\n\tHealthz        healthz.Healthz\n}\n\n// kubernetes implements the validator.Interface. It validates the request by\n// doing a Kubernetes token review.","sourceCodeStart":33,"sourceCodeEnd":69,"githubUrl":"https://github.com/dapr/dapr/blob/74ad41702745709bb15fe2114ff693b8c59bc3cc/pkg/sentry/server/validator/kubernetes/kubernetes.go#L33-L69","documentation":"Error \"kubernetes.io/pod/name claim is missing from Kubernetes token\" thrown in dapr/dapr.","triggerScenarios":"Thrown at pkg/sentry/server/validator/kubernetes/kubernetes.go:51 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"74ad41702745709bb15fe2114ff693b8c59bc3cc","analyzedAt":"2026-08-16T04:22:26.543Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}