{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/3622","labels_url":"https://api.github.com/repos/openshift/origin/issues/3622/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/3622/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/3622/events","html_url":"https://github.com/openshift/origin/pull/3622","id":93622282,"number":3622,"title":"add masterCA to SA token controller","user":{"login":"deads2k","id":8225098,"avatar_url":"https://avatars.githubusercontent.com/u/8225098?v=3","gravatar_id":"","url":"https://api.github.com/users/deads2k","html_url":"https://github.com/deads2k","followers_url":"https://api.github.com/users/deads2k/followers","following_url":"https://api.github.com/users/deads2k/following{/other_user}","gists_url":"https://api.github.com/users/deads2k/gists{/gist_id}","starred_url":"https://api.github.com/users/deads2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deads2k/subscriptions","organizations_url":"https://api.github.com/users/deads2k/orgs","repos_url":"https://api.github.com/users/deads2k/repos","events_url":"https://api.github.com/users/deads2k/events{/privacy}","received_events_url":"https://api.github.com/users/deads2k/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/lgtm","name":"lgtm","color":"009800"}],"state":"open","locked":false,"assignee":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"milestone":null,"comments":8,"created_at":"2015-07-07T20:35:50Z","updated_at":"2015-07-09T14:50:42Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/3622","html_url":"https://github.com/openshift/origin/pull/3622","diff_url":"https://github.com/openshift/origin/pull/3622.diff","patch_url":"https://github.com/openshift/origin/pull/3622.patch"},"body":"Fixes https://github.com/openshift/origin/issues/3579\r\n\r\nThis plumbs a `masterCA` element for `serviceAccountConfig` through the system.  It does not address two additional problems that I discovered:\r\n 1. If we have a external kube and a private key for SA tokens, we don't error or warn in the config validation.  I think we should error, because crazy stuff can happen and there doesn't seem to be a significant upside.\r\n 1. Adding a `masterCA` will not affect SA tokens that already exist, so those will still be unable to verify the api server."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/120010366","html_url":"https://github.com/openshift/origin/pull/3622#issuecomment-120010366","issue_url":"https://api.github.com/repos/openshift/origin/issues/3622","id":120010366,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2015-07-09T14:50:42Z","updated_at":"2015-07-09T14:50:42Z","body":"continuous-integration/openshift-jenkins/merge Evaluating for testing"}}