From e6c26da886d4ccd85eec83f2a0fa1aa418ecc969 Mon Sep 17 00:00:00 2001 From: Charles Eckman Date: Fri, 1 Feb 2019 16:31:01 -0800 Subject: [PATCH] Address comment on TokenReview --- pkg/apis/authentication/types.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkg/apis/authentication/types.go b/pkg/apis/authentication/types.go index a33dfe98985..77aaa472e1d 100644 --- a/pkg/apis/authentication/types.go +++ b/pkg/apis/authentication/types.go @@ -136,8 +136,9 @@ type TokenRequestSpec struct { // BoundObjectRef is a reference to an object that the token will be bound to. // The token will only be valid for as long as the bound object exists. - // NOTE: The API server will validate the BoundObjectRef, but other audiences - // may not. Keep ExpirationSeconds small if you want prompt revocation. + // NOTE: The API server's TokenReview endpoint will validate the + // BoundObjectRef, but other audiences may not. Keep ExpirationSeconds + // small if you want prompt revocation. BoundObjectRef *BoundObjectReference }