k3s/test/integration
Mike Danese 057b7af798 serviceaccount: check token is issued by correct iss before verifying
Right now if a JWT for an unknown issuer, for any subject hits the
serviceaccount token authenticator, we return a errors as if the token
was meant for us but we couldn't find a key to verify it. We should
instead return nil, false, nil.

This change helps us support multiple service account token
authenticators with different issuers.
2018-01-24 20:21:59 -08:00
..
apiserver use extensions client with explicit version 2017-11-22 21:18:14 +08:00
auth Merge pull request #58360 from liggitt/csi-node-authorizer 2018-01-18 20:55:34 -08:00
client use core client with explicit version globally 2017-10-27 15:48:32 +08:00
configmap use core client with explicit version globally 2017-10-27 15:48:32 +08:00
daemonset Check RegisterMetricAndTrackRateLimiterUsage error when starting controllers 2017-11-01 12:46:07 +01:00
defaulttolerationseconds Fix scheduler refs in BUILD files. 2018-01-05 15:05:01 -08:00
deployment Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
etcd fail earlier on discovery failures 2018-01-16 16:02:13 -05:00
evictions use core client with explicit version globally 2017-10-27 15:48:32 +08:00
examples Fix TestAggregatedAPIServer setup 2017-11-27 11:17:55 -05:00
framework Merge pull request #58360 from liggitt/csi-node-authorizer 2018-01-18 20:55:34 -08:00
garbagecollector Split the NodeController into lifecycle and ipam pieces. 2018-01-04 12:48:08 -08:00
master Revert k8s.gcr.io vanity domain 2017-12-22 14:36:16 -08:00
metrics Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
objectmeta update BUILD files 2017-10-15 18:18:13 -07:00
openshift update BUILD files 2017-10-15 18:18:13 -07:00
pods update BUILD files 2017-10-15 18:18:13 -07:00
quota admission: unify plugin constructors 2017-10-30 16:56:38 +01:00
replicaset Merge pull request #55995 from supereagle/extensions-client-with-version 2017-12-14 00:45:15 -08:00
replicationcontroller Add ReplicationController integration tests. 2017-11-07 14:55:47 -08:00
scale Fix build and test errors from etcd 3.2.13 upgrade 2018-01-07 08:22:08 -08:00
scheduler Fix scheduler refs in BUILD files. 2018-01-05 15:05:01 -08:00
scheduler_perf Fix scheduler refs in BUILD files. 2018-01-05 15:05:01 -08:00
secrets use core client with explicit version globally 2017-10-27 15:48:32 +08:00
serviceaccount serviceaccount: check token is issued by correct iss before verifying 2018-01-24 20:21:59 -08:00
storageclasses use core client with explicit version globally 2017-10-27 15:48:32 +08:00
tls Adding support for custom TLS ciphers in api server and kubelet 2018-01-17 12:55:55 -08:00
ttlcontroller update BUILD files 2017-10-15 18:18:13 -07:00
volume Validate that PV capacity and PVC capacity requests are greater than zero 2017-11-13 08:57:01 -08:00
BUILD Adding support for custom TLS ciphers in api server and kubelet 2018-01-17 12:55:55 -08:00
benchmark-controller.json Update pause container version to 3.1 2018-01-04 11:35:29 +01:00
doc.go don't use build tags to mark integration tests 2017-04-28 14:19:39 -07:00
utils.go use core client with explicit version globally 2017-10-27 15:48:32 +08:00