whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updating apiVersion for Certificate Signing Request object #1

Browse Source 
Issue detected: There are two references to old apiVersion for CertificateSigningRequest object

Ref: CertificateSigningRequest API is promoted to certificates.k8s.io/v1 (https://kubernetes.io/docs/setup/release/notes/#api-change)

Fix: Replaced "certificates.k8s.io/v1beta1" by "certificates.k8s.io/v1"
This commit is contained in:
Chris Tomas
2020-09-15 00:19:50 -05:00
committed by GitHub
parent 77b51db7e7
commit 9a06c1bc95
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/reference/access-authn-authz/certificate-signing-requests.md
+2 -2
View File
@@ -108,7 +108,7 @@ Kubernetes provides built-in signers that each have a well-known `signerName`:
1. `kubernetes.io/legacy-unknown`: has no guarantees for trust at all. Some distributions may honor these as client 1. `kubernetes.io/legacy-unknown`: has no guarantees for trust at all. Some distributions may honor these as client
certs, but that behavior is not standard Kubernetes behavior. certs, but that behavior is not standard Kubernetes behavior.
This signerName can only be requested in CertificateSigningRequests created via the `certificates.k8s.io/v1beta1` API version. This signerName can only be requested in CertificateSigningRequests created via the `certificates.k8s.io/v1` API version.
Never auto-approved by {{< glossary_tooltip term_id="kube-controller-manager" >}}. Never auto-approved by {{< glossary_tooltip term_id="kube-controller-manager" >}}.
1. Trust distribution: None. There is no standard trust or distribution for this signer in a Kubernetes cluster. 1. Trust distribution: None. There is no standard trust or distribution for this signer in a Kubernetes cluster.
1. Permitted subjects - any 1. Permitted subjects - any
@@ -245,7 +245,7 @@ Create a CertificateSigningRequest and submit it to a Kubernetes Cluster via kub
``` ```
cat <<EOF | kubectl apply -f - cat <<EOF | kubectl apply -f -
apiVersion: certificates.k8s.io/v1beta1 apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest kind: CertificateSigningRequest
metadata: metadata:
name: john name: john