mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-10-06 10:36:11 +00:00
Both plugins verify JWTs, but the OpenID Connect plugin performs much worse when faced with cache misses. Reorder the plugins so the service account plugin tries to authenticate a bearer token first.