k3s/test/integration/auth
Kubernetes Submit Queue 2da49321e6
Merge pull request #63653 from WanLinghao/token_expiry_limit
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Add limit to the TokenRequest expiration time

**What this PR does / why we need it**:
A new API TokenRequest has been implemented.It improves current serviceaccount model from many ways.
This patch adds limit to TokenRequest expiration time.


**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #63575

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```
2018-06-27 00:31:08 -07:00
..
BUILD Run hack/update-bazel.sh 2018-06-22 16:22:57 -07:00
accessreview_test.go stop using AlwaysAdmit admission 2018-03-13 20:02:56 +08:00
auth_test.go stop using AlwaysAdmit admission 2018-03-13 20:02:56 +08:00
bootstraptoken_test.go stop using AlwaysAdmit admission 2018-03-13 20:02:56 +08:00
main_test.go use testmain in integration tests 2017-07-12 17:34:55 -07:00
node_test.go dynamic Kubelet config reconciles ConfigMap updates 2018-05-21 09:03:58 -07:00
rbac_test.go apiserver: make SecureServingOptions and authz/n options re-usable 2018-02-13 11:16:38 +01:00
svcaccttoken_test.go This patch adds limit to the TokenRequest expiration time. It constrains a TokenRequest's expiration time to avoid extreme value which could harm the cluster. 2018-06-14 09:31:50 +08:00