Max Goltzsche
fa5e6587f1
handle new error where sa jwt issued in the future
...
Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
2023-03-02 03:15:13 +01:00
Max Goltzsche
031075d149
check jwt timestamp for zero value
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
2023-03-02 03:09:49 +01:00
Max Goltzsche
df8fa2eab5
bump go-jose to v2.6.0
...
Update go-jose from v2.2.2 to v2.6.0.
This is to make the kubernetes code compatible with newer go-jose versions that have a small breaking change (`jwt.NewNumericDate()` returns a pointer).
Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
2023-03-02 02:53:17 +01:00
dengyufeng2206
402b09f532
spelling fix
...
Signed-off-by: dengyufeng2206 <deng.yufeng@zte.com.cn>
2022-08-18 18:28:21 +08:00
Monis Khan
92c8596002
serviceaccount/claims: include validation failure error in the log
...
Without this fix, the errors are logged as:
unexpected validation error: *errors.errorString
Signed-off-by: Monis Khan <mok@vmware.com>
2021-10-27 16:50:25 -04:00
yoyinzyc
587cadf726
add context to serviceaccount authenticator metrics
2021-03-08 14:16:48 -08:00
cici37
95acec5a3b
Move client_builder to k8s.io/controller-manager
2020-10-19 14:48:22 -07:00
Davanum Srinivas
442a69c3bd
switch over k/k to use klog v2
...
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2020-05-16 07:54:27 -04:00
Jiajie Yang
ae0e52d28c
Monitoring safe rollout of time-bound service account token.
2020-04-22 11:59:16 -07:00
Jordan Liggitt
5125310023
Consider future deletionTimestamps when validating bound tokens
2020-03-27 14:37:33 -04:00
Mike Danese
67bbf753cb
retrofit svcacct token authenticator to support audience validation
2018-11-13 20:38:41 -08:00
Davanum Srinivas
954996e231
Move from glog to klog
...
- Move from the old github.com/golang/glog to k8s.io/klog
- klog as explicit InitFlags() so we add them as necessary
- we update the other repositories that we vendor that made a similar
change from glog to klog
* github.com/kubernetes/repo-infra
* k8s.io/gengo/
* k8s.io/kube-openapi/
* github.com/google/cadvisor
- Entirely remove all references to glog
- Fix some tests by explicit InitFlags in their init() methods
Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135
2018-11-10 07:50:31 -05:00
Mike Danese
e5227216c0
rebase authenticators onto new interface.
2018-10-22 10:16:59 -07:00
Mike Danese
43eaeb8c6c
svcacct: pass pod information in user.Info.Extra() when available
...
Fixes https://github.com/kubernetes/kubernetes/issues/59670
2018-08-31 11:54:50 -07:00
WanLinghao
ac94a0a253
fix a nit error in log
2018-06-27 14:21:27 +08:00
WanLinghao
198b9e482c
fix a error in serviceaccount validate.
...
This error is a human-writing error.
Small as it is, it could cause recreate Object validate
through bug.
This patch fix it.
2018-04-24 14:48:37 +08:00
Mike Danese
024f57affe
implement token authenticator for new id tokens
2018-02-27 17:20:46 -08:00
Mike Danese
8ad1c6655b
add support for /token subresource in serviceaccount registry
2018-02-21 13:16:51 -08:00
