{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/21001","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/21001/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/21001/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/21001/events","html_url":"https://github.com/kubernetes/kubernetes/pull/21001","id":132829584,"number":21001,"title":"plugin/pkg/auth/authenticator/token/oidc: get groups from custom claim","user":{"login":"ericchiang","id":2342749,"avatar_url":"https://avatars.githubusercontent.com/u/2342749?v=3","gravatar_id":"","url":"https://api.github.com/users/ericchiang","html_url":"https://github.com/ericchiang","followers_url":"https://api.github.com/users/ericchiang/followers","following_url":"https://api.github.com/users/ericchiang/following{/other_user}","gists_url":"https://api.github.com/users/ericchiang/gists{/gist_id}","starred_url":"https://api.github.com/users/ericchiang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ericchiang/subscriptions","organizations_url":"https://api.github.com/users/ericchiang/orgs","repos_url":"https://api.github.com/users/ericchiang/repos","events_url":"https://api.github.com/users/ericchiang/events{/privacy}","received_events_url":"https://api.github.com/users/ericchiang/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-10T22:02:49Z","updated_at":"2016-02-10T22:03:10Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/kubernetes/pulls/21001","html_url":"https://github.com/kubernetes/kubernetes/pull/21001","diff_url":"https://github.com/kubernetes/kubernetes/pull/21001.diff","patch_url":"https://github.com/kubernetes/kubernetes/pull/21001.patch"},"body":"This PR provides functionality that allows the current OpenID Connect plugin to optionally read user group membership from a custom JWT claim.\r\n\r\nOpenID Connect permits custom claims as part of ID Tokens ([document here](https://openid.net/specs/openid-connect-basic-1_0.html#IDToken)). And this allows Kubernetes aware OpenID Connect providers to produce ID Tokens with group information.\r\n\r\ncc: @erictune, @philips, @bobbyrullo"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/182600533","html_url":"https://github.com/kubernetes/kubernetes/pull/21001#issuecomment-182600533","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/21001","id":182600533,"user":{"login":"k8s-bot","id":12551979,"avatar_url":"https://avatars.githubusercontent.com/u/12551979?v=3","gravatar_id":"","url":"https://api.github.com/users/k8s-bot","html_url":"https://github.com/k8s-bot","followers_url":"https://api.github.com/users/k8s-bot/followers","following_url":"https://api.github.com/users/k8s-bot/following{/other_user}","gists_url":"https://api.github.com/users/k8s-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/k8s-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/k8s-bot/subscriptions","organizations_url":"https://api.github.com/users/k8s-bot/orgs","repos_url":"https://api.github.com/users/k8s-bot/repos","events_url":"https://api.github.com/users/k8s-bot/events{/privacy}","received_events_url":"https://api.github.com/users/k8s-bot/received_events","type":"User","site_admin":false},"created_at":"2016-02-10T22:03:10Z","updated_at":"2016-02-10T22:03:10Z","body":"Can one of the admins verify that this patch is reasonable to test? (reply \"ok to test\", or if you trust the user, reply \"add to whitelist\")\n\nIf this message is too spammy, please complain to ixdy."}}