From e2ff3280e463102804bb2ad417c6cbbb6aa90985 Mon Sep 17 00:00:00 2001 From: Andrew Keesler Date: Thu, 6 Aug 2020 13:34:34 -0400 Subject: [PATCH 1/2] exec credential provider: add ProxyURL to Cluster Signed-off-by: Andrew Keesler --- keps/sig-auth/541-external-credential-providers/README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/keps/sig-auth/541-external-credential-providers/README.md b/keps/sig-auth/541-external-credential-providers/README.md index 64291bb4ae2..d028ab53aa6 100644 --- a/keps/sig-auth/541-external-credential-providers/README.md +++ b/keps/sig-auth/541-external-credential-providers/README.md @@ -271,6 +271,10 @@ type Cluster struct { // +listType=atomic // +optional CAData []byte `json:"caData,omitempty"` + // ProxyURL is the URL to the proxy to be used for all requests to this + // cluster. + // +optional + ProxyURL string `json:"proxy-url,omitempty"` // Config holds additional config data that is specific to the exec plugin // with regards to the cluster being authenticated to. // +optional From 3df8de594037a1e6b83d17050d7d06f8183d61e1 Mon Sep 17 00:00:00 2001 From: Andrew Keesler Date: Thu, 6 Aug 2020 13:37:22 -0400 Subject: [PATCH 2/2] exec credential provider: use qualified name for cluster extension Signed-off-by: Andrew Keesler --- keps/sig-auth/541-external-credential-providers/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/keps/sig-auth/541-external-credential-providers/README.md b/keps/sig-auth/541-external-credential-providers/README.md index d028ab53aa6..564405f791c 100644 --- a/keps/sig-auth/541-external-credential-providers/README.md +++ b/keps/sig-auth/541-external-credential-providers/README.md @@ -156,7 +156,7 @@ clusters: server: "https://1.2.3.4:8080" certificate-authority: "/etc/kubernetes/ca.pem" extensions: - - name: exec # reserved extension name for per cluster exec config + - name: client.authentication.k8s.io/exec # reserved extension name for per cluster exec config extension: some-config-per-cluster: config-data # arbitrary config contexts: