github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-12 12:48:51 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #41755 from liggitt/cert-user-extra

Browse Source 
Automatic merge from submit-queue

Include all user.Info data in CSR object

In order to use authorization checks to auto-approve CSRs in the future, we need all the info from the user.Info interface.

This mirrors the API fields in the TokenReview API used to return user info, and in the SubjectAccessReview API we use to check authorization.

```release-note
The CertificateSigningRequest API added the `extra` field to persist all information about the requesting user. This mirrors the fields in the SubjectAccessReview API used to check authorization.
```
This commit is contained in:
Kubernetes Submit Queue
2017-02-23 02:24:32 -08:00
committed by GitHub
parent 567595f550 893928c194
commit 713919990e
17 changed files with 910 additions and 1314 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
api/openapi-spec/swagger.json
View File

@@ -41280,12 +41280,23 @@
]
},
"io.k8s.kubernetes.pkg.apis.certificates.v1beta1.CertificateSigningRequestSpec": {
"description": "This information is immutable after the request is created. Only the Request and ExtraInfo fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.",
"description": "This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.",
"required": [
"request"
],
"properties": {
"extra": {
"description": "Extra information about the requesting user. See user.Info interface for details.",
"type": "object",
"additionalProperties": {
"type": "array",
"items": {
"type": "string"
}
}
},
"groups": {
"description": "Group information about the requesting user. See user.Info interface for details.",
"type": "array",
"items": {
"type": "string"
@@ -41297,6 +41308,7 @@
"format": "byte"
},
"uid": {
"description": "UID information about the requesting user. See user.Info interface for details.",
"type": "string"
},
"usages": {
@@ -41307,7 +41319,7 @@
}
},
"username": {
"description": "Information about the requesting user (if relevant) See user.Info interface for details",
"description": "Information about the requesting user. See user.Info interface for details.",
"type": "string"
}
}

1173
api/swagger-spec/certificates.k8s.io_v1alpha1.json
View File

File diff suppressed because it is too large Load Diff

14
api/swagger-spec/certificates.k8s.io_v1beta1.json
View File

@@ -886,7 +886,7 @@
},
"v1beta1.CertificateSigningRequestSpec": {
"id": "v1beta1.CertificateSigningRequestSpec",
"description": "This information is immutable after the request is created. Only the Request and ExtraInfo fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.",
"description": "This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.",
"required": [
"request"
],
@@ -904,16 +904,22 @@
},
"username": {
"type": "string",
"description": "Information about the requesting user (if relevant) See user.Info interface for details"
"description": "Information about the requesting user. See user.Info interface for details."
},
"uid": {
"type": "string"
"type": "string",
"description": "UID information about the requesting user. See user.Info interface for details."
},
"groups": {
"type": "array",
"items": {
"type": "string"
}
},
"description": "Group information about the requesting user. See user.Info interface for details."
},
"extra": {
"type": "object",
"description": "Extra information about the requesting user. See user.Info interface for details."
}
}
},