From 945e1e78927391ac34d0583f72e5fdc3bafef274 Mon Sep 17 00:00:00 2001
From: Marek Siarkowicz <siarkowicz@google.com>
Date: Thu, 29 Oct 2020 18:07:32 +0100
Subject: [PATCH] Add datapolicy tags to pkg/apis

---
 pkg/apis/authentication/types.go | 4 ++--
 pkg/apis/core/types.go           | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkg/apis/authentication/types.go b/pkg/apis/authentication/types.go
index 0ae670d47053..4b9af6fa773c 100644
--- a/pkg/apis/authentication/types.go
+++ b/pkg/apis/authentication/types.go
@@ -55,7 +55,7 @@ type TokenReview struct {
 // TokenReviewSpec is a description of the token authentication request.
 type TokenReviewSpec struct {
 	// Token is the opaque bearer token.
-	Token string
+	Token string `datapolicy:"token"`
 	// Audiences is a list of the identifiers that the resource server presented
 	// with the token identifies as. Audience-aware token authenticators will
 	// verify that the token was intended for at least one of the audiences in
@@ -142,7 +142,7 @@ type TokenRequestSpec struct {
 // TokenRequestStatus is the result of a token request.
 type TokenRequestStatus struct {
 	// Token is the opaque bearer token.
-	Token string
+	Token string `datapolicy:"token"`
 	// ExpirationTimestamp is the time of expiration of the returned token.
 	ExpirationTimestamp metav1.Time
 }
diff --git a/pkg/apis/core/types.go b/pkg/apis/core/types.go
index 0c6baa983325..bab3b832fd87 100644
--- a/pkg/apis/core/types.go
+++ b/pkg/apis/core/types.go
@@ -4931,7 +4931,7 @@ type Secret struct {
 	// base64 encoded string, representing the arbitrary (possibly non-string)
 	// data value here.
 	// +optional
-	Data map[string][]byte
+	Data map[string][]byte `datapolicy:"password,security-key,token"`
 
 	// Used to facilitate programmatic handling of secret data.
 	// +optional