Add signerName field to CSR resource spec

Signed-off-by: James Munnelly <james.munnelly@jetstack.io>
This commit is contained in:
James Munnelly
2019-12-18 02:19:06 +00:00
parent aaca31c35e
commit a983356caa
36 changed files with 1437 additions and 93 deletions

View File

@@ -4605,6 +4605,10 @@
"format": "byte",
"type": "string"
},
"signerName": {
"description": "Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:\n 1. If it's a kubelet client certificate, it is assigned\n \"kubernetes.io/kube-apiserver-client-kubelet\".\n 2. If it's a kubelet serving certificate, it is assigned\n \"kubernetes.io/kubelet-serving\".\n 3. Otherwise, it is assigned \"kubernetes.io/legacy-unknown\".\nDistribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.",
"type": "string"
},
"uid": {
"description": "UID information about the requesting user. See user.Info interface for details.",
"type": "string"