Mike Danese 057b7af798 serviceaccount: check token is issued by correct iss before verifying ...

Right now if a JWT for an unknown issuer, for any subject hits the
serviceaccount token authenticator, we return a errors as if the token
was meant for us but we couldn't find a key to verify it. We should
instead return nil, false, nil.

This change helps us support multiple service account token
authenticators with different issuers.

2018-01-24 20:21:59 -08:00

..

apiserver

use extensions client with explicit version

2017-11-22 21:18:14 +08:00

auth

Merge pull request #58360 from liggitt/csi-node-authorizer

2018-01-18 20:55:34 -08:00

client

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

configmap

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

daemonset

Check RegisterMetricAndTrackRateLimiterUsage error when starting controllers

2017-11-01 12:46:07 +01:00

defaulttolerationseconds

Fix scheduler refs in BUILD files.

2018-01-05 15:05:01 -08:00

deployment

Autogenerate BUILD files

2017-12-23 13:12:11 -08:00

etcd

fail earlier on discovery failures

2018-01-16 16:02:13 -05:00

evictions

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

examples

Fix TestAggregatedAPIServer setup

2017-11-27 11:17:55 -05:00

framework

Merge pull request #58360 from liggitt/csi-node-authorizer

2018-01-18 20:55:34 -08:00

garbagecollector

Split the NodeController into lifecycle and ipam pieces.

2018-01-04 12:48:08 -08:00

master

Revert k8s.gcr.io vanity domain

2017-12-22 14:36:16 -08:00

metrics

Autogenerate BUILD files

2017-12-23 13:12:11 -08:00

objectmeta

update BUILD files

2017-10-15 18:18:13 -07:00

openshift

update BUILD files

2017-10-15 18:18:13 -07:00

pods

update BUILD files

2017-10-15 18:18:13 -07:00

quota

admission: unify plugin constructors

2017-10-30 16:56:38 +01:00

replicaset

Merge pull request #55995 from supereagle/extensions-client-with-version

2017-12-14 00:45:15 -08:00

replicationcontroller

Add ReplicationController integration tests.

2017-11-07 14:55:47 -08:00

scale

Fix build and test errors from etcd 3.2.13 upgrade

2018-01-07 08:22:08 -08:00

scheduler

Fix scheduler refs in BUILD files.

2018-01-05 15:05:01 -08:00

scheduler_perf

Fix scheduler refs in BUILD files.

2018-01-05 15:05:01 -08:00

secrets

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

serviceaccount

serviceaccount: check token is issued by correct iss before verifying

2018-01-24 20:21:59 -08:00

storageclasses

use core client with explicit version globally

2017-10-27 15:48:32 +08:00

tls

Adding support for custom TLS ciphers in api server and kubelet

2018-01-17 12:55:55 -08:00

ttlcontroller

update BUILD files

2017-10-15 18:18:13 -07:00

volume

Validate that PV capacity and PVC capacity requests are greater than zero

2017-11-13 08:57:01 -08:00

benchmark-controller.json

Update pause container version to 3.1

2018-01-04 11:35:29 +01:00

BUILD

Adding support for custom TLS ciphers in api server and kubelet

2018-01-17 12:55:55 -08:00

doc.go

don't use build tags to mark integration tests

2017-04-28 14:19:39 -07:00

utils.go

use core client with explicit version globally

2017-10-27 15:48:32 +08:00