Search Options

Results per page
Sort
Preferred Languages
Advance

Results 71 - 80 of 89 for tokenreview (0.52 sec)

  1. pkg/apis/apiserverinternal/validation/validation_test.go

    	}, {
    		name:        "core.pods",
    		expectedErr: "",
    	}, {
    		name:        "authentication.k8s.io.tokenreviews",
    		expectedErr: "",
    	}, {
    		name:        strings.Repeat("x", 253) + ".tokenreviews",
    		expectedErr: "",
    	}, {
    		name:        strings.Repeat("x", 254) + ".tokenreviews",
    		expectedErr: `the group segment must be no more than 253 characters`,
    	}, {
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Thu Jul 13 21:43:49 UTC 2023
    - 16.1K bytes
    - Viewed (0)
  2. pkg/controlplane/storageversionhashdata/data.go

    // version hash.
    var NoStorageVersionHash = sets.NewString(
    	"v1/bindings",
    	"v1/componentstatuses",
    	"authentication.k8s.io/v1/selfsubjectreviews",
    	"authentication.k8s.io/v1/tokenreviews",
    	"authorization.k8s.io/v1/localsubjectaccessreviews",
    	"authorization.k8s.io/v1/selfsubjectaccessreviews",
    	"authorization.k8s.io/v1/selfsubjectrulesreviews",
    	"authorization.k8s.io/v1/subjectaccessreviews",
    )
    
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed May 29 20:14:51 UTC 2024
    - 4.9K bytes
    - Viewed (0)
  3. manifests/charts/istiod-remote/templates/clusterrole.yaml

        - {{ . | quote }}
    {{- end }}
        verbs: ["approve"]
    {{- end}}
    
      # Used by Istiod to verify the JWT tokens
      - apiGroups: ["authentication.k8s.io"]
        resources: ["tokenreviews"]
        verbs: ["create"]
    
      # Used by Istiod to verify gateway SDS
      - apiGroups: ["authorization.k8s.io"]
        resources: ["subjectaccessreviews"]
        verbs: ["create"]
    
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri Apr 12 16:44:32 UTC 2024
    - 5.8K bytes
    - Viewed (0)
  4. pkg/generated/openapi/zz_generated.openapi.go

    identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated...
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed Jun 05 18:37:07 UTC 2024
    - 3M bytes
    - Viewed (0)
  5. api/openapi-spec/swagger.json

    identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated...
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed Jun 05 18:37:07 UTC 2024
    - 3.1M bytes
    - Viewed (0)
  6. manifests/charts/istio-control/istio-discovery/templates/clusterrole.yaml

    {{- range .Values.global.certSigners }}
        - {{ . | quote }}
    {{- end }}
        verbs: ["approve"]
    {{- end}}
    
      # Used by Istiod to verify the JWT tokens
      - apiGroups: ["authentication.k8s.io"]
        resources: ["tokenreviews"]
        verbs: ["create"]
    
      # Used by Istiod to verify gateway SDS
      - apiGroups: ["authorization.k8s.io"]
        resources: ["subjectaccessreviews"]
        verbs: ["create"]
    
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri Apr 12 16:44:32 UTC 2024
    - 5.7K bytes
    - Viewed (0)
  7. CHANGELOG/CHANGELOG-1.20.md

    - Exposes and sets a default timeout for the TokenReview client for DelegatingAuthenticationOptions ([#96217](https://github.com/kubernetes/kubernetes/pull/96217), [@p0lyn0mial](https://github.com/p0lyn0mial)) [SIG API Machinery and Cloud Provider]
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed Jan 19 21:05:45 UTC 2022
    - 409K bytes
    - Viewed (0)
  8. samples/addons/kiali.yaml

      resources:
      - projects
      verbs:
      - get
    - apiGroups: ["route.openshift.io"]
      resources:
      - routes
      verbs:
      - get
    - apiGroups: ["authentication.k8s.io"]
      resources:
      - tokenreviews
      verbs:
      - create
    - apiGroups: ["oauth.openshift.io"]
      resources:
      - oauthclients
      resourceNames:
      - kiali-istio-system
      verbs:
      - get
    ...
    ---
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Wed Jun 12 18:57:35 UTC 2024
    - 10.6K bytes
    - Viewed (0)
  9. staging/src/k8s.io/apiserver/pkg/server/options/authentication.go

    	}
    	fs.StringVar(&s.RemoteKubeConfigFile, "authentication-kubeconfig", s.RemoteKubeConfigFile, ""+
    		"kubeconfig file pointing at the 'core' kubernetes server with enough rights to create "+
    		"tokenreviews.authentication.k8s.io."+optionalKubeConfigSentence)
    
    	fs.DurationVar(&s.CacheTTL, "authentication-token-webhook-cache-ttl", s.CacheTTL,
    		"The duration to cache responses from the webhook token authenticator.")
    
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Tue Mar 21 14:51:22 UTC 2023
    - 19.9K bytes
    - Viewed (0)
  10. staging/src/k8s.io/cli-runtime/artifacts/openapi/swagger.json

    identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated...
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Tue Feb 20 15:45:02 UTC 2024
    - 4.5M bytes
    - Viewed (0)
Back to top