- Sort Score
- Result 10 results
- Languages All
Results 61 - 70 of 89 for tokenreview (0.64 sec)
-
staging/src/k8s.io/cli-runtime/artifacts/openapi/swagger-with-shared-parameters.json
identifiers chosen by the authenticator that are compatible with both the TokenReview and token. An identifier is any identifier in the intersection of the TokenReviewSpec audiences and the token's audiences. A client of the TokenReview API that sets the spec.audiences field should validate that a compatible audience identifier is returned in the status.audiences field to ensure that the TokenReview server is audience aware. If a TokenReview returns an empty status.audience field where status.authenticated...
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Feb 20 15:45:02 UTC 2024 - 2.3M bytes - Viewed (0) -
cluster/gce/gci/audit_policy_test.go
pods = resource("pods", "default") podStatus = resource("pods", "default", "", "status") secrets = resource("secrets", "default") tokenReviews = resource("tokenreviews", "", "authentication.k8s.io") deployments = resource("deployments", "default", "apps") clusterRoles = resource("clusterroles", "", "rbac.authorization.k8s.io")
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Oct 30 06:23:50 UTC 2021 - 9.8K bytes - Viewed (0) -
manifests/charts/istio-control/istio-discovery/templates/reader-clusterrole.yaml
resources: ["serviceimports"] verbs: ["get", "list", "watch"] - apiGroups: ["apps"] resources: ["replicasets"] verbs: ["get", "list", "watch"] - apiGroups: ["authentication.k8s.io"] resources: ["tokenreviews"] verbs: ["create"] - apiGroups: ["authorization.k8s.io"] resources: ["subjectaccessreviews"] verbs: ["create"] {{- if .Values.global.externalIstiod }} - apiGroups: [""]
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 02 08:32:06 UTC 2024 - 2.2K bytes - Viewed (0) -
manifests/charts/istiod-remote/templates/reader-clusterrole.yaml
resources: ["serviceimports"] verbs: ["get", "list", "watch"] - apiGroups: ["apps"] resources: ["replicasets"] verbs: ["get", "list", "watch"] - apiGroups: ["authentication.k8s.io"] resources: ["tokenreviews"] verbs: ["create"] - apiGroups: ["authorization.k8s.io"] resources: ["subjectaccessreviews"] verbs: ["create"] {{- if .Values.global.externalIstiod }} - apiGroups: [""]
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 02 08:32:06 UTC 2024 - 2.2K bytes - Viewed (0) -
CHANGELOG/CHANGELOG-1.30.md
- ValidatingAdmissionPolicy now exclude TokenReview, SelfSubjectReview, LocalSubjectAccessReview, and SubjectAccessReview from all versions of authentication.k8s.io and authorization.k8s.io group. ([#123543](https://github.com/kubernetes/kubernetes/pull/123543), [@jiahuif](https://github.com/jiahuif))...
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jun 12 04:05:28 UTC 2024 - 253.2K bytes - Viewed (0) -
pkg/quota/v1/install/registry.go
{Group: "", Resource: "bindings"}: {}, {Group: "", Resource: "componentstatuses"}: {}, {Group: authentication.GroupName, Resource: "tokenreviews"}: {}, {Group: authentication.GroupName, Resource: "selfsubjectreviews"}: {}, {Group: authorization.GroupName, Resource: "subjectaccessreviews"}: {},
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Sep 14 16:00:26 UTC 2022 - 2.6K bytes - Viewed (0) -
cluster/addons/cloud-controller-manager/cloud-node-controller-role.yaml
verbs: - patch - update - apiGroups: - "" resources: - secrets verbs: - create - delete - get - update - apiGroups: - "authentication.k8s.io" resources: - tokenreviews verbs: - create - apiGroups: - "*" resources: - "*" verbs: - list - watch - apiGroups: - "" resources: - serviceaccounts/token verbs: - create
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Feb 08 14:40:04 UTC 2023 - 2.9K bytes - Viewed (0) -
pkg/kubeapiserver/admission/exclusion/resources.go
var excluded = []schema.GroupResource{ // BEGIN interception of these non-persisted resources may break the cluster {Group: "authentication.k8s.io", Resource: "selfsubjectreviews"}, {Group: "authentication.k8s.io", Resource: "tokenreviews"}, {Group: "authorization.k8s.io", Resource: "localsubjectaccessreviews"}, {Group: "authorization.k8s.io", Resource: "selfsubjectaccessreviews"}, {Group: "authorization.k8s.io", Resource: "selfsubjectrulesreviews"},
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Feb 28 23:31:18 UTC 2024 - 2.5K bytes - Viewed (0) -
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/testdata/cluster-roles.yaml
creationTimestamp: null labels: kubernetes.io/bootstrapping: rbac-defaults name: system:auth-delegator rules: - apiGroups: - authentication.k8s.io resources: - tokenreviews verbs: - create - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create - apiVersion: rbac.authorization.k8s.io/v1
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Jul 18 08:11:08 UTC 2023 - 24.1K bytes - Viewed (0) -
plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go
func NodeRules() []rbacv1.PolicyRule { nodePolicyRules := []rbacv1.PolicyRule{ // Needed to check API access. These creates are non-mutating rbacv1helpers.NewRule("create").Groups(authenticationGroup).Resources("tokenreviews").RuleOrDie(), rbacv1helpers.NewRule("create").Groups(authorizationGroup).Resources("subjectaccessreviews", "localsubjectaccessreviews").RuleOrDie(), // Needed to build serviceLister, to populate env vars for services
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Mar 08 19:25:10 UTC 2024 - 34.4K bytes - Viewed (0)