Merge pull request #73439 from cceckman/object

Fix typo, and note BoundObjectRef isn't always checked
This commit is contained in:
Kubernetes Prow Robot
2019-02-21 16:27:33 -08:00
committed by GitHub
4 changed files with 13 additions and 4 deletions

View File

@@ -135,7 +135,10 @@ type TokenRequestSpec struct {
ExpirationSeconds int64
// BoundObjectRef is a reference to an object that the token will be bound to.
// The token will only be valid for as long as the bound objet exists.
// The token will only be valid for as long as the bound object exists.
// NOTE: The API server's TokenReview endpoint will validate the
// BoundObjectRef, but other audiences may not. Keep ExpirationSeconds
// small if you want prompt revocation.
BoundObjectRef *BoundObjectReference
}