123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100 |
- /*
- Copyright 2017 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- // This file was autogenerated by go-to-protobuf. Do not edit it manually!
- syntax = 'proto2';
- package k8s.io.kubernetes.pkg.apis.authentication.v1;
- import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
- import "k8s.io/apimachinery/pkg/runtime/generated.proto";
- import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";
- import "k8s.io/apimachinery/pkg/util/intstr/generated.proto";
- import "k8s.io/apiserver/pkg/apis/example/v1/generated.proto";
- // Package-wide variables from generator "generated".
- option go_package = "v1";
- // ExtraValue masks the value so protobuf can generate
- // +protobuf.nullable=true
- // +protobuf.options.(gogoproto.goproto_stringer)=false
- message ExtraValue {
- // items, if empty, will result in an empty slice
- repeated string items = 1;
- }
- // TokenReview attempts to authenticate a token to a known user.
- // Note: TokenReview requests may be cached by the webhook token authenticator
- // plugin in the kube-apiserver.
- message TokenReview {
- // +optional
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
- // Spec holds information about the request being evaluated
- optional TokenReviewSpec spec = 2;
- // Status is filled in by the server and indicates whether the request can be authenticated.
- // +optional
- optional TokenReviewStatus status = 3;
- }
- // TokenReviewSpec is a description of the token authentication request.
- message TokenReviewSpec {
- // Token is the opaque bearer token.
- // +optional
- optional string token = 1;
- }
- // TokenReviewStatus is the result of the token authentication request.
- message TokenReviewStatus {
- // Authenticated indicates that the token was associated with a known user.
- // +optional
- optional bool authenticated = 1;
- // User is the UserInfo associated with the provided token.
- // +optional
- optional UserInfo user = 2;
- // Error indicates that the token couldn't be checked
- // +optional
- optional string error = 3;
- }
- // UserInfo holds the information about the user needed to implement the
- // user.Info interface.
- message UserInfo {
- // The name that uniquely identifies this user among all active users.
- // +optional
- optional string username = 1;
- // A unique value that identifies this user across time. If this user is
- // deleted and another user by the same name is added, they will have
- // different UIDs.
- // +optional
- optional string uid = 2;
- // The names of groups this user is a part of.
- // +optional
- repeated string groups = 3;
- // Any additional information provided by the authenticator.
- // +optional
- map<string, ExtraValue> extra = 4;
- }
|