forked from openfaas/faas-netes
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathiam.openfaas.com_jwtissuers.yaml
64 lines (64 loc) · 2.51 KB
/
iam.openfaas.com_jwtissuers.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
annotations:
controller-gen.kubebuilder.io/version: v0.11.4
name: jwtissuers.iam.openfaas.com
spec:
group: iam.openfaas.com
names:
kind: JwtIssuer
listKind: JwtIssuerList
plural: jwtissuers
singular: jwtissuer
scope: Namespaced
versions:
- additionalPrinterColumns:
- jsonPath: .spec.iss
name: Issuer
type: string
- jsonPath: .spec.aud
name: Audience
type: string
- jsonPath: .spec.tokenExpiry
name: Expiry
type: string
name: v1
schema:
openAPIV3Schema:
description: JwtIssuer is used to define a JWT issuer for a function
type: object
required:
- spec
properties:
apiVersion:
description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
type: string
kind:
description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
type: string
metadata:
type: object
spec:
description: JwtIssuerSpec is the spec for a JwtIssuer resource
type: object
required:
- aud
- iss
properties:
aud:
description: Audience is the intended audience of the JWT, at times, like with Auth0 this is the client ID of the app, and not our validating server
type: array
items:
type: string
iss:
description: Issuer is the issuer of the JWT
type: string
issInternal:
description: IssuerInternal provides an alternative URL to use to download the public key for this issuer. It's useful for the system issuer.
type: string
tokenExpiry:
type: string
served: true
storage: true
subresources: {}