{"action":"created","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/10957","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/10957/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/10957/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/10957/events","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/pull/10957","id":93909779,"number":10957,"title":"plugin/pkg/auth: add OpenID Connect token authenticator","user":{"login":"yifan-gu","id":3278588,"avatar_url":"https://avatars.githubusercontent.com/u/3278588?v=3","gravatar_id":"","url":"https://api.github.com/users/yifan-gu","html_url":"https://github.com/yifan-gu","followers_url":"https://api.github.com/users/yifan-gu/followers","following_url":"https://api.github.com/users/yifan-gu/following{/other_user}","gists_url":"https://api.github.com/users/yifan-gu/gists{/gist_id}","starred_url":"https://api.github.com/users/yifan-gu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yifan-gu/subscriptions","organizations_url":"https://api.github.com/users/yifan-gu/orgs","repos_url":"https://api.github.com/users/yifan-gu/repos","events_url":"https://api.github.com/users/yifan-gu/events{/privacy}","received_events_url":"https://api.github.com/users/yifan-gu/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/cla:%20yes","name":"cla: yes","color":"bfe5bf"}],"state":"open","locked":false,"assignee":{"login":"erictune","id":8105590,"avatar_url":"https://avatars.githubusercontent.com/u/8105590?v=3","gravatar_id":"","url":"https://api.github.com/users/erictune","html_url":"https://github.com/erictune","followers_url":"https://api.github.com/users/erictune/followers","following_url":"https://api.github.com/users/erictune/following{/other_user}","gists_url":"https://api.github.com/users/erictune/gists{/gist_id}","starred_url":"https://api.github.com/users/erictune/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erictune/subscriptions","organizations_url":"https://api.github.com/users/erictune/orgs","repos_url":"https://api.github.com/users/erictune/repos","events_url":"https://api.github.com/users/erictune/events{/privacy}","received_events_url":"https://api.github.com/users/erictune/received_events","type":"User","site_admin":false},"milestone":null,"comments":40,"created_at":"2015-07-08T23:04:59Z","updated_at":"2015-08-05T18:13:23Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/pulls/10957","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/pull/10957","diff_url":"https://github.com/GoogleCloudPlatform/kubernetes/pull/10957.diff","patch_url":"https://github.com/GoogleCloudPlatform/kubernetes/pull/10957.patch"},"body":"This PR implements the token authenticator interface for the OIDC protocols. It also adds two flags (\"--oidc-endpoint\", \"--oidc-client-id\") for apiserver\r\nto enable OIDC authentication.\r\n\r\nIt mainly uses [go-oidc packages](https://github.com/coreos/go-oidc). It uses the [oidc client](http://godoc.org/github.com/coreos/go-oidc/oidc#Client) to sync and cache the pub keys automatically. Also it will verify the token using the pub keys.\r\n\r\n/cc @erictune @liggitt @smarterclayton"},"comment":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/comments/128095808","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/pull/10957#issuecomment-128095808","issue_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/10957","id":128095808,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2015-08-05T18:13:23Z","updated_at":"2015-08-05T18:13:23Z","body":"`--oidc-username-claim`, defaults to `\"sub\"`?"}}