github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix AuthenticationConfiguration docs around nested claims via CEL

Browse Source 
Signed-off-by: Monis Khan <mok@microsoft.com>
This commit is contained in:
Monis Khan
2024-03-05 12:01:11 -05:00
parent 74adc0b3f7
commit 290f2a7e1b
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
staging/src/k8s.io/apiserver/pkg/apis/apiserver/v1alpha1/types.go
View File

@@ -309,7 +309,7 @@ type ClaimValidationRule struct {
// CEL expressions have access to the contents of the token claims, organized into CEL variable: // CEL expressions have access to the contents of the token claims, organized into CEL variable:
// - 'claims' is a map of claim names to claim values. // - 'claims' is a map of claim names to claim values.
// For example, a variable named 'sub' can be accessed as 'claims.sub'. // For example, a variable named 'sub' can be accessed as 'claims.sub'.
// Nested claims can be accessed using dot notation, e.g. 'claims.email.verified'. // Nested claims can be accessed using dot notation, e.g. 'claims.foo.bar'.
// Must return true for the validation to pass. // Must return true for the validation to pass.
// //
// Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ // Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/
@@ -398,7 +398,7 @@ type PrefixedClaimOrExpression struct {
// CEL expressions have access to the contents of the token claims, organized into CEL variable: // CEL expressions have access to the contents of the token claims, organized into CEL variable:
// - 'claims' is a map of claim names to claim values. // - 'claims' is a map of claim names to claim values.
// For example, a variable named 'sub' can be accessed as 'claims.sub'. // For example, a variable named 'sub' can be accessed as 'claims.sub'.
// Nested claims can be accessed using dot notation, e.g. 'claims.email.verified'. // Nested claims can be accessed using dot notation, e.g. 'claims.foo.bar'.
// //
// Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ // Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/
// //
@@ -420,7 +420,7 @@ type ClaimOrExpression struct {
// CEL expressions have access to the contents of the token claims, organized into CEL variable: // CEL expressions have access to the contents of the token claims, organized into CEL variable:
// - 'claims' is a map of claim names to claim values. // - 'claims' is a map of claim names to claim values.
// For example, a variable named 'sub' can be accessed as 'claims.sub'. // For example, a variable named 'sub' can be accessed as 'claims.sub'.
// Nested claims can be accessed using dot notation, e.g. 'claims.email.verified'. // Nested claims can be accessed using dot notation, e.g. 'claims.foo.bar'.
// //
// Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ // Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/
// //
@@ -448,7 +448,7 @@ type ExtraMapping struct {
// CEL expressions have access to the contents of the token claims, organized into CEL variable: // CEL expressions have access to the contents of the token claims, organized into CEL variable:
// - 'claims' is a map of claim names to claim values. // - 'claims' is a map of claim names to claim values.
// For example, a variable named 'sub' can be accessed as 'claims.sub'. // For example, a variable named 'sub' can be accessed as 'claims.sub'.
// Nested claims can be accessed using dot notation, e.g. 'claims.email.verified'. // Nested claims can be accessed using dot notation, e.g. 'claims.foo.bar'.
// //
// Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ // Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/
// //