Skip to content

Commit 5d0e2dc

Browse files
committed
updating as per review
1 parent 764d023 commit 5d0e2dc

File tree

1 file changed

+4
-4
lines changed
  • keps/sig-auth/3257-cluster-trust-bundles

1 file changed

+4
-4
lines changed

keps/sig-auth/3257-cluster-trust-bundles/README.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -290,7 +290,7 @@ kind: ClusterTrustBundle
290290
metadata:
291291
name: example.com:server-tls:foo
292292
labels:
293-
k8s.example/cluster-trust-bundle-version: live
293+
example.com/cluster-trust-bundle-version: live
294294
spec:
295295
signerName: example.com/server-tls
296296
trustBundle: "<... PEM DATA ...>"
@@ -321,7 +321,7 @@ spec:
321321
+ - clusterTrustBundle:
322322
+ signerName: example.com/server-tls
323323
+ labelSelector:
324-
+ k8s.example/cluster-trust-bundle-version: live
324+
+ example.com/cluster-trust-bundle-version: live
325325
+ path: ca_certificates.pem
326326
```
327327

@@ -562,11 +562,11 @@ Human operators or controllers may use unique names and labels to maintain diffe
562562

563563
For example, if I maintain `example.com/my-signer`, I can use the following strategy:
564564
* I maintain one ClusterTrustBundle named `example.com:my-signer:live`, labeled
565-
`k8s.example/cluster-trust-bundle-version=live` (the object name is mostly
565+
`example.com/cluster-trust-bundle-version=live` (the object name is mostly
566566
irrelevant).
567567
* I maintain an additional ClusterTrustBundle named
568568
`example.com:my-signer:canary`, labeled
569-
`k8s.example/cluster-trust-bundle-version=canary`.
569+
`example.com/cluster-trust-bundle-version=canary`.
570570
* I have coordinated some fraction of my workloads to use the canary label
571571
selector, while the bulk of them use the live label selector
572572
* When I want to perform a root rotation or other trust change, I edit the

0 commit comments

Comments
 (0)