bcfdd8b141
This change adds the StructuredAuthenticationConfigurationEgressSelector beta feature (default on). When enabled, each JWT authenticator specified via the AuthenticationConfiguration.jwt array can optionally specify either the controlplane or cluster egress selector by setting the issuer.egressSelectorType field. When unset, the prior behavior of using no egress selector is retained. Egress selection is valuable when the persona configuring the JWT authenticator and the persona managing the control plane are different individuals. This change allows the latter to protect control plane network services from unexpected connections. Signed-off-by: Monis Khan <mok@microsoft.com> Kubernetes-commit: b69fd9d42c4d03b8fe5b37433d59f85483835d30 |
||
|---|---|---|
| .. | ||
| token | ||
| OWNERS | ||
| doc.go | ||