Monis Khan b69fd9d42c Add egress selector support to JWT authenticator ...

This change adds the StructuredAuthenticationConfigurationEgressSelector
beta feature (default on).  When enabled, each JWT authenticator
specified via the AuthenticationConfiguration.jwt array can
optionally specify either the controlplane or cluster egress
selector by setting the issuer.egressSelectorType field.  When
unset, the prior behavior of using no egress selector is retained.

Egress selection is valuable when the persona configuring the JWT
authenticator and the persona managing the control plane are
different individuals.  This change allows the latter to protect
control plane network services from unexpected connections.

Signed-off-by: Monis Khan <mok@microsoft.com>

2025-07-15 16:03:07 -04:00

..

config.go

Add egress selector support to JWT authenticator

2025-07-15 16:03:07 -04:00

OWNERS

Check in OWNERS modified by update-yamlfmt.sh

2021-12-09 21:31:26 -05:00