Merge pull request #88246 from munnerz/csr-signername-controllers

Update CSR controllers & kubelet to respect signerName field
This commit is contained in:
Kubernetes Prow Robot
2020-02-28 23:38:39 -08:00
committed by GitHub
69 changed files with 3753 additions and 220 deletions

View File

@@ -4605,6 +4605,10 @@
"format": "byte",
"type": "string"
},
"signerName": {
"description": "Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:\n 1. If it's a kubelet client certificate, it is assigned\n \"kubernetes.io/kube-apiserver-client-kubelet\".\n 2. If it's a kubelet serving certificate, it is assigned\n \"kubernetes.io/kubelet-serving\".\n 3. Otherwise, it is assigned \"kubernetes.io/legacy-unknown\".\nDistribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.",
"type": "string"
},
"uid": {
"description": "UID information about the requesting user. See user.Info interface for details.",
"type": "string"