Enable configuration of the issuer of bound service account tokens

wking · Jan 21, 2020 · 5637f56 · 5637f56
1 parent 0e2ff1e
commit 5637f56
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/config/v1/types_authentication.go b/config/v1/types_authentication.go
@@ -50,6 +50,12 @@ type AuthenticationSpec struct {
 	// The namespace for these secrets is openshift-config.
 	// +optional
 	WebhookTokenAuthenticators []WebhookTokenAuthenticator `json:"webhookTokenAuthenticators,omitempty"`
+
+	// serviceAccountIssuer is the identifier of the bound service account token
+	// issuer.
+	// The default is auth.openshift.io.
+	// +optional
+	ServiceAccountIssuer string `json:"serviceAccountIssuer"`
 }
 
 type AuthenticationStatus struct {