Rename authentication.{kubernetes=>kcp}.io/cluster-name

Signed-off-by: Nelo-T. Wallus <[email protected]>
Signed-off-by: Nelo-T. Wallus <[email protected]>

Author: ntnn

pkg/authorization/resolver_test.go

@@ -177,7 +177,7 @@ func TestResolverWithWarrants(t *testing.T) {
 		},
 		{
 			name:                 "base with foreign service account warrant",
-			user:                 &user.DefaultInfo{Name: "user-a", Extra: map[string][]string{rbacregistryvalidation.WarrantExtraKey: {`{"user":"system:serviceaccount:default:foo","extra":{"authentication.kubernetes.io/cluster-name": ["another"]}}`}}},
+			user:                 &user.DefaultInfo{Name: "user-a", Extra: map[string][]string{rbacregistryvalidation.WarrantExtraKey: {`{"user":"system:serviceaccount:default:foo","extra":{"authentication.kcp.io/cluster-name": ["another"]}}`}}},
 			wantResourceRules:    []authorizer.ResourceRuleInfo{getPods, getNodes},
 			wantNonResourceRules: []authorizer.NonResourceRuleInfo{getRoot, getHealthz},
 		},

pkg/proxy/proxy.go

@@ -75,7 +75,7 @@ func appendClientCertAuthHeaders(header http.Header, user userinfo.Info, userHea
 	}
 
 	for k, values := range user.GetExtra() {
-		// Key must be encoded to enable e.g authentication.kubernetes.io/cluster-name
+		// Key must be encoded to enable e.g authentication.kcp.io/cluster-name
 		// This is decoded in the RequestHeader auth handler
 		encodedKey := url.PathEscape(k)
 		for _, v := range values {

pkg/server/localproxy.go

@@ -320,7 +320,7 @@ func appendClientCertAuthHeaders(header http.Header, user userinfo.Info, userHea
 	}
 
 	for k, values := range user.GetExtra() {
-		// Key must be encoded to enable e.g authentication.kubernetes.io/cluster-name
+		// Key must be encoded to enable e.g authentication.kcp.io/cluster-name
 		// This is decoded in the RequestHeader auth handler
 		encodedKey := url.PathEscape(k)
 		for _, v := range values {