- Sort Score
- Result 10 results
- Languages All
Results 1 - 9 of 9 for audiences (0.24 sec)
-
staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/oidc_test.go
"username": "jane", "exp": %d }`, valid.Unix()), wantErr: `oidc: verify token: oidc: expected audience "my-client" got ["not-my-client"]`, }, { // ID tokens may contain multiple audiences: // https://openid.net/specs/openid-connect-core-1_0.html#IDToken name: "multiple-audiences", options: Options{ JWTAuthenticator: apiserver.JWTAuthenticator{ Issuer: apiserver.Issuer{
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 97.7K bytes - Viewed (0) -
pkg/printers/internalversion/printers.go
} row.Cells = append(row.Cells, storageCapacity) tokenRequests := "<unset>" if obj.Spec.TokenRequests != nil { audiences := []string{} for _, t := range obj.Spec.TokenRequests { audiences = append(audiences, t.Audience) } tokenRequests = strings.Join(audiences, ",") } requiresRepublish := false if obj.Spec.RequiresRepublish != nil { requiresRepublish = *obj.Spec.RequiresRepublish
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jun 11 14:04:15 UTC 2024 - 128.3K bytes - Viewed (0) -
pkg/config/validation/validation.go
if rule == nil { return nil } if len(rule.Issuer) == 0 { errs = multierror.Append(errs, errors.New("issuer must be set")) } for _, audience := range rule.Audiences { if len(audience) == 0 { errs = multierror.Append(errs, errors.New("audience must be non-empty string")) } } if len(rule.JwksUri) != 0 { if _, err := security.ParseJwksURI(rule.JwksUri); err != nil {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jun 12 04:03:33 UTC 2024 - 107.2K bytes - Viewed (0) -
operator/cmd/mesh/testdata/manifest-generate/data-snapshot.tar.gz
more details at: https://istio.io/docs/reference/config/security/request_authentication.html' properties: jwtRules: description: Define the list of JWTs that can be validated at the selected workloads' proxy. items: properties: audiences: description: The list of JWT [audiences](https://tools.ietf.org/html/rfc7519#section-4.1.3) that are allowed to access. items: type: string type: array forwardOriginalToken: description: If set to true, the original token will be kept for the upstream request. type:...
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jan 10 05:10:03 UTC 2024 - 198.1K bytes - Viewed (0) -
operator/cmd/mesh/testdata/manifest-generate/output/pilot_default.golden.yaml
- name: istio-token projected: sources: - serviceAccountToken: path: istio-token expirationSeconds: 43200 audience: {{ .Values.global.sds.token.aud }} {{- end }} {{- if eq .Values.global.pilotCertProvider "istiod" }} - name: istiod-ca-cert configMap: name: istio-ca-root-cert
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jan 10 05:10:03 UTC 2024 - 102.6K bytes - Viewed (0) -
staging/src/k8s.io/api/storage/v1/generated.pb.go
_ = l if m.ExpirationSeconds != nil { i = encodeVarintGenerated(dAtA, i, uint64(*m.ExpirationSeconds)) i-- dAtA[i] = 0x10 } i -= len(m.Audience) copy(dAtA[i:], m.Audience) i = encodeVarintGenerated(dAtA, i, uint64(len(m.Audience))) i-- dAtA[i] = 0xa return len(dAtA) - i, nil } func (m *VolumeAttachment) Marshal() (dAtA []byte, err error) { size := m.Size()
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 01 06:06:37 UTC 2024 - 133.8K bytes - Viewed (0) -
staging/src/k8s.io/api/storage/v1beta1/generated.pb.go
_ = l if m.ExpirationSeconds != nil { i = encodeVarintGenerated(dAtA, i, uint64(*m.ExpirationSeconds)) i-- dAtA[i] = 0x10 } i -= len(m.Audience) copy(dAtA[i:], m.Audience) i = encodeVarintGenerated(dAtA, i, uint64(len(m.Audience))) i-- dAtA[i] = 0xa return len(dAtA) - i, nil } func (m *VolumeAttachment) Marshal() (dAtA []byte, err error) { size := m.Size()
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 01 06:06:37 UTC 2024 - 133.9K bytes - Viewed (0) -
staging/src/k8s.io/apimachinery/pkg/util/managedfields/internal/testdata/swagger.json
"properties": { "audience": { "description": "Audience is the intended audience of the token. A recipient of a token must identify itself with an identifier specified in the audience of the token, and otherwise should reject the token. The audience defaults to the identifier of the apiserver.", "type": "string" },
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Feb 20 15:45:02 UTC 2024 - 229.4K bytes - Viewed (0) -
cluster/gce/gci/configure-helper.sh
params+=("--mode=grpc") params+=("--server-port=0") params+=("--agent-namespace=kube-system") params+=("--agent-service-account=konnectivity-agent") params+=("--authentication-audience=system:konnectivity-server") params+=("--kubeconfig=/etc/srv/kubernetes/konnectivity-server/kubeconfig") params+=("--proxy-strategies=default")
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Jun 10 22:07:47 UTC 2024 - 141.1K bytes - Viewed (0)