{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/community/issues/2314","repository_url":"https://api.github.com/repos/kubernetes/community","labels_url":"https://api.github.com/repos/kubernetes/community/issues/2314/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/community/issues/2314/comments","events_url":"https://api.github.com/repos/kubernetes/community/issues/2314/events","html_url":"https://github.com/kubernetes/community/pull/2314","id":335924510,"node_id":"MDExOlB1bGxSZXF1ZXN0MTk3NTAwNDE0","number":2314,"title":"svcacct token issuer should support oidc discovery","user":{"login":"mikedanese","id":1787169,"node_id":"MDQ6VXNlcjE3ODcxNjk=","avatar_url":"https://avatars3.githubusercontent.com/u/1787169?v=4","gravatar_id":"","url":"https://api.github.com/users/mikedanese","html_url":"https://github.com/mikedanese","followers_url":"https://api.github.com/users/mikedanese/followers","following_url":"https://api.github.com/users/mikedanese/following{/other_user}","gists_url":"https://api.github.com/users/mikedanese/gists{/gist_id}","starred_url":"https://api.github.com/users/mikedanese/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikedanese/subscriptions","organizations_url":"https://api.github.com/users/mikedanese/orgs","repos_url":"https://api.github.com/users/mikedanese/repos","events_url":"https://api.github.com/users/mikedanese/events{/privacy}","received_events_url":"https://api.github.com/users/mikedanese/received_events","type":"User","site_admin":false},"labels":[{"id":486032367,"node_id":"MDU6TGFiZWw0ODYwMzIzNjc=","url":"https://api.github.com/repos/kubernetes/community/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"bfe5bf","default":false},{"id":653942785,"node_id":"MDU6TGFiZWw2NTM5NDI3ODU=","url":"https://api.github.com/repos/kubernetes/community/labels/kind/design","name":"kind/design","color":"c7def8","default":false},{"id":653942870,"node_id":"MDU6TGFiZWw2NTM5NDI4NzA=","url":"https://api.github.com/repos/kubernetes/community/labels/sig/auth","name":"sig/auth","color":"d2b48c","default":false},{"id":653942911,"node_id":"MDU6TGFiZWw2NTM5NDI5MTE=","url":"https://api.github.com/repos/kubernetes/community/labels/size/M","name":"size/M","color":"eebb00","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2018-06-26T17:39:57Z","updated_at":"2018-08-29T17:08:47Z","closed_at":null,"author_association":"MEMBER","pull_request":{"url":"https://api.github.com/repos/kubernetes/community/pulls/2314","html_url":"https://github.com/kubernetes/community/pull/2314","diff_url":"https://github.com/kubernetes/community/pull/2314.diff","patch_url":"https://github.com/kubernetes/community/pull/2314.patch"},"body":"This was omitted from the original document for the purpose of expediting it's merge. Reintroducing now that we've made progress. \r\n\r\nThis change allows clients with knowledge of oidc discovery to validate service account tokens. Simpler clients can choose to ignore the discovery document and validate tokens against the keys directly by fetching the JWKs URL.\r\n\r\n\r\n@kubernetes/sig-auth-feature-requests @kubernetes/sig-auth-api-reviews "},"comment":{"url":"https://api.github.com/repos/kubernetes/community/issues/comments/417030768","html_url":"https://github.com/kubernetes/community/pull/2314#issuecomment-417030768","issue_url":"https://api.github.com/repos/kubernetes/community/issues/2314","id":417030768,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNzAzMDc2OA==","user":{"login":"mikedanese","id":1787169,"node_id":"MDQ6VXNlcjE3ODcxNjk=","avatar_url":"https://avatars3.githubusercontent.com/u/1787169?v=4","gravatar_id":"","url":"https://api.github.com/users/mikedanese","html_url":"https://github.com/mikedanese","followers_url":"https://api.github.com/users/mikedanese/followers","following_url":"https://api.github.com/users/mikedanese/following{/other_user}","gists_url":"https://api.github.com/users/mikedanese/gists{/gist_id}","starred_url":"https://api.github.com/users/mikedanese/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikedanese/subscriptions","organizations_url":"https://api.github.com/users/mikedanese/orgs","repos_url":"https://api.github.com/users/mikedanese/repos","events_url":"https://api.github.com/users/mikedanese/events{/privacy}","received_events_url":"https://api.github.com/users/mikedanese/received_events","type":"User","site_admin":false},"created_at":"2018-08-29T17:08:47Z","updated_at":"2018-08-29T17:08:47Z","author_association":"MEMBER","body":"> I am mostly referring to the fact that integrators still have Kube specific knowledge in their codebase\r\n\r\nI think this is not true. This doc would be compatible with AWS and vault without any changes on their side."}}
{"actor":{"display_login":"mikedanese"}}