Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sig-Auth Post-Acceptance TODOs #168

Open
13 tasks
ibihim opened this issue Apr 25, 2022 · 0 comments
Open
13 tasks

Sig-Auth Post-Acceptance TODOs #168

ibihim opened this issue Apr 25, 2022 · 0 comments

Comments

@ibihim
Copy link
Collaborator

ibihim commented Apr 25, 2022 •
edited
Loading

  • Consider updating tls-reload-interaval with k8s.io/apiserver code as it auto-reloads TLS (link, link)
  • Consider checking for the audience in the token provided (link).
  • Use k8s defaults for TTLs (link, link).
  • Safer checks on username config and other properties. Protect against typos and missing fields (link).
  • Add dedicated user input validation that matches k/k (link).

Unspecified

  • Use in-cluster CA (link)
  • http2 transport review (link, link)
  • Use aggregated apiserver proxy (link).
  • Don't create self-signed certs (link).

Minor

  • Rename from Matches to Equal (link).
  • Add test cases (link), link).
  • Always nil function (link).
  • Embedding types > delegation (link).

Related: Pre-Acceptance.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ibihim