Enable configuration of the issuer of bound service account tokens
@@ -50,6 +50,12 @@ type AuthenticationSpec struct {
// The namespace for these secrets is openshift-config.
// +optional
WebhookTokenAuthenticators []WebhookTokenAuthenticator `json:"webhookTokenAuthenticators,omitempty"`
+
+ // serviceAccountIssuer is the identifier of the bound service account token
+ // issuer.
+ // The default is auth.openshift.io.
+ // +optional
+ ServiceAccountIssuer string `json:"serviceAccountIssuer"`
}
type AuthenticationStatus struct {
