diff --git a/pkg/apis/authentication/types.go b/pkg/apis/authentication/types.go index a33dfe98985..77aaa472e1d 100644 --- a/pkg/apis/authentication/types.go +++ b/pkg/apis/authentication/types.go @@ -136,8 +136,9 @@ type TokenRequestSpec struct { // BoundObjectRef is a reference to an object that the token will be bound to. // The token will only be valid for as long as the bound object exists. - // NOTE: The API server will validate the BoundObjectRef, but other audiences - // may not. Keep ExpirationSeconds small if you want prompt revocation. + // NOTE: The API server's TokenReview endpoint will validate the + // BoundObjectRef, but other audiences may not. Keep ExpirationSeconds + // small if you want prompt revocation. BoundObjectRef *BoundObjectReference }