- Sort Score
- Result 10 results
- Languages All
Results 1 - 7 of 7 for JTI (0.03 sec)
-
staging/src/k8s.io/apiserver/pkg/authentication/serviceaccount/util.go
info.Extra[NodeUIDKey] = []string{sa.NodeUID} } } return info } // CredentialIDForJTI converts a given JTI string into a credential identifier for use in a // users 'extra' info. func CredentialIDForJTI(jti string) string { if len(jti) == 0 { return "" } return "JTI=" + jti } // IsServiceAccountToken returns true if the secret is a valid api token for the service account
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Feb 05 10:24:31 UTC 2024 - 8.1K bytes - Viewed (0) -
pkg/serviceaccount/claims.go
staleTokensTotal.WithContext(ctx).Inc() } else { validTokensTotal.WithContext(ctx).Inc() } } var jti string if utilfeature.DefaultFeatureGate.Enabled(features.ServiceAccountTokenJTI) { jti = public.ID } return &apiserverserviceaccount.ServiceAccountInfo{ Namespace: private.Kubernetes.Namespace, Name: private.Kubernetes.Svcacct.Name,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Oct 30 21:15:10 UTC 2023 - 11.3K bytes - Viewed (0) -
pkg/registry/core/serviceaccount/storage/storage_test.go
}, ) } func TestCreate_Token_SetsCredentialIDAuditAnnotation(t *testing.T) { storage, server := newStorage(t) defer server.Terminate(t) defer storage.Store.DestroyFunc() // Enable JTI feature featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, features.ServiceAccountTokenJTI, true) ctx := context.Background() // Create a test service account
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 6.7K bytes - Viewed (0) -
docs/sts/wso2.md
| exp | _integer_ | The token expiration time. | | jti | _string_ | Unique identifier for the JWT token. |
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Thu Sep 29 04:28:45 UTC 2022 - 8.7K bytes - Viewed (0) -
pkg/serviceaccount/claims_test.go
featureNodeBinding: true, // really fast exp: 0, // nil audience aud: nil, err: "internal error, token can only be bound to one object type", }, { // ensure JTI is set sa: sa, // enable setting JTI feature featureJTI: true, // really fast exp: 0, // nil audience aud: nil, sc: &jwt.Claims{ Subject: "system:serviceaccount:myns:mysvcacct",
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 17.9K bytes - Viewed (0) -
CHANGELOG/CHANGELOG-1.30.md
- Node information is now embedded into Pod-bound service account tokens as additional metadata. The 'JTI' field is set in issued service account tokens, and this information is embedded as `authentication.kubernetes.io/credential-id` in the user's ExtraInfo. ([#123135](https://github.com/kubernetes/kubernetes/pull/123135), [@munnerz](https://github.com/munnerz))...
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 04:05:28 UTC 2024 - 253.2K bytes - Viewed (0) -
CHANGELOG/CHANGELOG-1.29.md
- `kube-apiserver` added:
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 03:42:38 UTC 2024 - 324.5K bytes - Viewed (0)