• Kubernetes Submit Queue's avatar
    Merge pull request #59492 from dims/remove-old-keystone-authenticator · 2a804989
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Remove experimental keystone authenticator
    
    **What this PR does / why we need it**:
    
    experimental-keystone-url and experimental-keystone-ca-file were always
    experimental. So we don't need a deprecation period.
    KeystoneAuthenticator was on the server side and needed userid/password
    to be passed in and used that to authenticate with Keystone. We now
    have authentication and authorization web hooks that can be used. There
    is a external repo with a webook for keystone which works fine along
    with the kubectl auth provider that was added in:
    a0cebcb5
    
    So we don't need this older style / hard coded / experimental code
    anymore.
    
    **Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
    Fixes #
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    kube-apiserver: the experimental in-tree Keystone password authenticator has been removed in favor of extensions that enable use of Keystone tokens.
    ```
    2a804989
Name
Last commit
Last update
..
admission Loading commit data...
authenticator Loading commit data...
authorizer Loading commit data...
options Loading commit data...
server Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
default_storage_factory_builder.go Loading commit data...
doc.go Loading commit data...