You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
userInfo is a set of attributes belonging to the user making this request.
70
72
-->
71
-
发出此请求的用户的用户属性。
73
+
74
+
`userInfo` 是属于发出此请求的用户的一组属性。
72
75
73
76
<aname="UserInfo"></a>
74
77
<!--
75
78
*UserInfo holds the information about the user needed to implement the user.Info interface.*
76
79
-->
80
+
77
81
**userInfo 包含实现 user.Info 接口所需的用户相关信息。**
78
82
79
83
-**userInfo.extra** (map[string][]string)
80
84
81
85
<!--
82
-
Any additional information provided by the authenticator.
86
+
extra is any additional information provided by the authenticator.
83
87
-->
84
88
85
-
由身份认证组件提供的所有附加信息。
89
+
`extra` 是指身份验证器提供的任何附加信息。
86
90
87
91
-**userInfo.groups** ([]string)
88
92
89
93
<!--
90
94
*Atomic: will be replaced during a merge*
91
-
92
-
The names of groups this user is a part of.
95
+
96
+
groups is the names of groups this user is a part of.
93
97
-->
94
-
98
+
95
99
**原子性：合并期间将被替换**
96
100
97
-
此用户所属的用户组的名称。
101
+
`groups` 是该用户所属的群组名称。
98
102
99
103
-**userInfo.uid** (string)
100
104
101
105
<!--
102
-
A unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.
106
+
uid is a unique value that identifies this user across time. If this user is deleted and another user by the same name is added, they will have different UIDs.
Audiences are the intendend audiences of the token. A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.
77
+
audiences are the intendend audiences of the token. A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.
78
78
-->
79
-
-**audiences** ([]string)，必需
79
+
-**audiences** ([]string)
80
80
81
81
**原子：将在合并期间被替换**
82
82
83
-
audiences 是令牌预期的受众。
83
+
`audiences` 是令牌预期的受众。
84
84
令牌的接收方必须在令牌的受众列表中用一个标识符来标识自己，否则应拒绝该令牌。
85
85
为多个受众签发的令牌可用于认证所列举的任意受众的身份，但这意味着目标受众彼此之间的信任程度较高。
86
86
87
87
-**boundObjectRef** (BoundObjectReference)
88
88
89
89
<!--
90
-
BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.
90
+
boundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.
91
91
92
92
<a name="BoundObjectReference"></a>
93
93
*BoundObjectReference is a reference to an object that a token is bound to.*
ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.
135
+
expirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the 'expiration' field in a response.
ExpirationTimestamp is the time of expiration of the returned token.
152
+
- **expirationTimestamp** (Time)
153
+
expirationTimestamp is the time of expiration of the returned token.
153
154
154
155
<a name="Time"></a>
155
156
*Time is a wrapper around time.Time which supports correct marshaling to YAML and JSON. Wrappers are provided for many of the factory methods that the time package offers.*
156
157
157
-
- **token** (string), required
158
-
Token is the opaque bearer token.
158
+
- **token** (string)
159
+
token is the opaque bearer token.
159
160
-->
160
-
-**expirationTimestamp** (Time)，必需
161
+
-**expirationTimestamp** (Time)
161
162
162
-
expirationTimestamp 是已返回令牌的到期时间。
163
+
`expirationTimestamp` 是已返回令牌的到期时间。
163
164
164
165
<aname="Time"></a>
165
166
**Time 是 time.Time 的包装器，支持正确编组为 YAML 和 JSON。为 time 包提供的许多工厂方法提供了包装器。**
166
167
167
-
-**token** (string)，必需
168
+
-**token** (string)
168
169
169
-
token 是不透明的持有者令牌（Bearer Token）。
170
+
`token` 是不透明的持有者令牌（Bearer Token）。
170
171
171
172
<!--
172
173
## Operations {#Operations}
@@ -199,7 +200,7 @@ POST /api/v1/namespaces/{namespace}/serviceaccounts/{name}/token
0 commit comments