Mike Danese 057b7af798 serviceaccount: check token is issued by correct iss before verifying ... Right now if a JWT for an unknown issuer, for any subject hits the serviceaccount token authenticator, we return a errors as if the token was meant for us but we couldn't find a key to verify it. We should instead return nil, false, nil. This change helps us support multiple service account token authenticators with different issuers.		2018-01-24 20:21:59 -08:00
..
api	Merge pull request #57059 from ericchiang/client-go/remove-openapi-import	2018-01-12 01:26:16 -08:00
apis	Never let cluster-scoped resources skip webhooks	2018-01-19 14:05:04 -08:00
auth	…
capabilities	…
client	run update code-gen	2018-01-24 16:45:23 +08:00
cloudprovider	Merge pull request #58368 from MrHohn/gce-externalLB-update-host	2018-01-24 16:38:39 -08:00
controller	Don't bind PVs and PVCs with different access modes.	2018-01-24 09:48:38 +01:00
credentialprovider	Better check for GCE VM	2018-01-17 18:35:51 -05:00
features	By default block service proxy to external IP addresses.	2018-01-24 04:13:15 +00:00
fieldpath	…
generated	generated	2018-01-23 14:11:49 -05:00
kubeapiserver	serviceaccount: check token is issued by correct iss before verifying	2018-01-24 20:21:59 -08:00
kubectl	Merge pull request #56206 from brancz/top-metrics-s	2018-01-23 13:17:31 -08:00
kubelet	Merge pull request #45442 from verb/pod-tshoot-1	2018-01-24 11:48:49 -08:00
kubemark	…
master	Remove unused code in UT files in pkg/	2018-01-15 16:02:35 +08:00
printers	Show all the annotations in ingress rules	2018-01-19 14:13:17 -03:00
probe	…
proxy	Merge pull request #57942 from m1093782566/localhost-masq	2018-01-19 20:00:36 -08:00
quota	Merge pull request #50286 from Pingan2017/modify0808	2018-01-15 11:35:03 -08:00
registry	By default block service proxy to external IP addresses.	2018-01-24 04:13:15 +00:00
routes	…
scheduler	Add better event handling for deleted Pods	2018-01-23 12:03:35 -08:00
security	selinux/mustrunas_test.go(TestMustRunAsValidate): add more test cases to improve code coverage.	2018-01-24 18:52:11 +01:00
securitycontext	pkg/securitycontext/util_test.go(TestAddNoNewPrivileges): update tests.	2018-01-08 15:46:39 +01:00
serviceaccount	serviceaccount: check token is issued by correct iss before verifying	2018-01-24 20:21:59 -08:00
ssh	…
util	Merge pull request #58284 from mfojtik/findmnt-out	2018-01-18 13:11:30 -08:00
version	All Kubelet flags should be explicitly registered	2018-01-09 17:37:34 -08:00
volume	Merge pull request #58549 from dims/backup-default-location-for-cloud-config	2018-01-23 05:01:31 -08:00
watch	…
.import-restrictions	…
BUILD	create auto-gen files	2018-01-17 16:23:03 +08:00
OWNERS	…