kubernetypes 1.35.8 → 1.36.0

package/dist/api/admission/v1.d.ts

@@ -1,7 +1,7 @@
 import * as m2 from 'kubernetypes/api/authentication/v1';
-import * as m0 from 'kubernetypes/apimachinery/apis/meta/v1';
+import * as m1 from 'kubernetypes/apimachinery/apis/meta/v1';
 import * as m3 from 'kubernetypes/apimachinery/runtime';
-import * as m1 from 'kubernetypes/apimachinery/types';
+import * as m0 from 'kubernetypes/apimachinery/types';
 /**
  * AdmissionRequest describes the admission.Attributes for the admission request.
  */
@@ -14,7 +14,7 @@ export type AdmissionRequest = {
     /**
      * kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)
      */
-    'kind': m0.GroupVersionKind;
+    'kind'?: m1.GroupVersionKind;
     /**
      * name is the name of the object as presented in the request.  On a CREATE operation, the client may omit name and
      * rely on the server to generate the name.  If that is the case, this field will contain an empty string.
@@ -36,7 +36,7 @@ export type AdmissionRequest = {
      * operation is the operation being performed. This may be different than the operation
      * requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
      */
-    'operation': Operation;
+    'operation'?: Operation;
     /**
      * options is the operation option structure of the operation being performed.
      * e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be
@@ -57,7 +57,7 @@ export type AdmissionRequest = {
      *
      * See documentation for the "matchPolicy" field in the webhook configuration type for more details.
      */
-    'requestKind'?: m0.GroupVersionKind;
+    'requestKind'?: m1.GroupVersionKind;
     /**
      * requestResource is the fully-qualified resource of the original API request (for example, v1.pods).
      * If this is specified and differs from the value in "resource", an equivalent match and conversion was performed.
@@ -70,7 +70,7 @@ export type AdmissionRequest = {
      *
      * See documentation for the "matchPolicy" field in the webhook configuration type.
      */
-    'requestResource'?: m0.GroupVersionResource;
+    'requestResource'?: m1.GroupVersionResource;
     /**
      * requestSubResource is the name of the subresource of the original API request, if any (for example, "status" or "scale")
      * If this is specified and differs from the value in "subResource", an equivalent match and conversion was performed.
@@ -80,7 +80,7 @@ export type AdmissionRequest = {
     /**
      * resource is the fully-qualified resource being requested (for example, v1.pods)
      */
-    'resource': m0.GroupVersionResource;
+    'resource'?: m1.GroupVersionResource;
     /**
      * subResource is the subresource being requested, if any (for example, "status" or "scale")
      */
@@ -91,11 +91,11 @@ export type AdmissionRequest = {
      * The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request.
      * It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
      */
-    'uid': m1.UID;
+    'uid'?: m0.UID;
     /**
      * userInfo is information about the requesting user
      */
-    'userInfo': m2.UserInfo;
+    'userInfo'?: m2.UserInfo;
 };
 /**
  * AdmissionResponse describes an admission response.
@@ -104,7 +104,7 @@ export type AdmissionResponse = {
     /**
      * allowed indicates whether or not the admission request was permitted.
      */
-    'allowed': boolean;
+    'allowed'?: boolean;
     /**
      * auditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted).
      * MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with
@@ -126,12 +126,12 @@ export type AdmissionResponse = {
      * status is the result contains extra details into why an admission request was denied.
      * This field IS NOT consulted in any way if "Allowed" is "true".
      */
-    'status'?: m0.Status;
+    'status'?: m1.Status;
     /**
      * uid is an identifier for the individual request/response.
      * This must be copied over from the corresponding AdmissionRequest.
      */
-    'uid': m1.UID;
+    'uid'?: m0.UID;
     /**
      * warnings is a list of warning messages to return to the requesting API client.
      * Warning messages describe a problem the client making the API request should correct or be aware of.
@@ -143,7 +143,7 @@ export type AdmissionResponse = {
 /**
  * AdmissionReview describes an admission review request/response.
  */
-export type AdmissionReview = m0.TypeMeta<'admission.k8s.io/v1', 'AdmissionReview'> & {
+export type AdmissionReview = m1.TypeMeta<'admission.k8s.io/v1', 'AdmissionReview'> & {
     /**
      * request describes the attributes for the admission request.
      */

package/dist/api/admission/v1beta1.d.ts

@@ -14,7 +14,7 @@ export type AdmissionRequest = {
     /**
      * kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)
      */
-    'kind': m0.GroupVersionKind;
+    'kind'?: m0.GroupVersionKind;
     /**
      * name is the name of the object as presented in the request.  On a CREATE operation, the client may omit name and
      * rely on the server to generate the name.  If that is the case, this field will contain an empty string.
@@ -36,7 +36,7 @@ export type AdmissionRequest = {
      * operation is the operation being performed. This may be different than the operation
      * requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
      */
-    'operation': Operation;
+    'operation'?: Operation;
     /**
      * options is the operation option structure of the operation being performed.
      * e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be
@@ -80,7 +80,7 @@ export type AdmissionRequest = {
     /**
      * resource is the fully-qualified resource being requested (for example, v1.pods)
      */
-    'resource': m0.GroupVersionResource;
+    'resource'?: m0.GroupVersionResource;
     /**
      * subResource is the subresource being requested, if any (for example, "status" or "scale")
      */
@@ -91,11 +91,11 @@ export type AdmissionRequest = {
      * The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request.
      * It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
      */
-    'uid': m1.UID;
+    'uid'?: m1.UID;
     /**
      * userInfo is information about the requesting user
      */
-    'userInfo': m2.UserInfo;
+    'userInfo'?: m2.UserInfo;
 };
 /**
  * AdmissionResponse describes an admission response.
@@ -104,7 +104,7 @@ export type AdmissionResponse = {
     /**
      * allowed indicates whether or not the admission request was permitted.
      */
-    'allowed': boolean;
+    'allowed'?: boolean;
     /**
      * auditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted).
      * MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with
@@ -131,7 +131,7 @@ export type AdmissionResponse = {
      * uid is an identifier for the individual request/response.
      * This should be copied over from the corresponding AdmissionRequest.
      */
-    'uid': m1.UID;
+    'uid'?: m1.UID;
     /**
      * warnings is a list of warning messages to return to the requesting API client.
      * Warning messages describe a problem the client making the API request should correct or be aware of.

package/dist/api/apiextensions/v1.d.ts

@@ -1,6 +1,6 @@
-import * as m0 from 'kubernetypes/apimachinery/apis/meta/v1';
-import * as m2 from 'kubernetypes/apimachinery/runtime';
-import * as m1 from 'kubernetypes/apimachinery/types';
+import * as m2 from 'kubernetypes/apimachinery/apis/meta/v1';
+import * as m1 from 'kubernetypes/apimachinery/runtime';
+import * as m0 from 'kubernetypes/apimachinery/types';
 export type ConditionStatus = 'False' | 'True' | 'Unknown' | (string & {});
 /**
  * ConversionRequest describes the conversion request parameters.
@@ -13,14 +13,14 @@ export type ConversionRequest = {
     /**
      * objects is the list of custom resource objects to be converted.
      */
-    'objects': m2.RawExtension[];
+    'objects': m1.RawExtension[];
     /**
      * uid is an identifier for the individual request/response. It allows distinguishing instances of requests which are
      * otherwise identical (parallel requests, etc).
      * The UID is meant to track the round trip (request/response) between the Kubernetes API server and the webhook, not the user request.
      * It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
      */
-    'uid': m1.UID;
+    'uid': m0.UID;
 };
 /**
  * ConversionResponse describes a conversion response.
@@ -32,7 +32,7 @@ export type ConversionResponse = {
      * must also have the same size as the input list with the same objects in the same order (equal kind, metadata.uid, metadata.name and metadata.namespace).
      * The webhook is allowed to mutate labels and annotations. Any other change to the metadata is silently ignored.
      */
-    'convertedObjects': m2.RawExtension[];
+    'convertedObjects': m1.RawExtension[];
     /**
      * result contains the result of conversion with extra details if the conversion failed. `result.status` determines if
      * the conversion failed or succeeded. The `result.status` field is required and represents the success or failure of the
@@ -40,17 +40,17 @@ export type ConversionResponse = {
      * `result.status` to `Failure` and provide more details in `result.message` and return http status 200. The `result.message`
      * will be used to construct an error message for the end user.
      */
-    'result': m0.Status;
+    'result': m2.Status;
     /**
      * uid is an identifier for the individual request/response.
      * This should be copied over from the corresponding `request.uid`.
      */
-    'uid': m1.UID;
+    'uid': m0.UID;
 };
 /**
  * ConversionReview describes a conversion request/response.
  */
-export type ConversionReview = m0.TypeMeta<'apiextensions.k8s.io/v1', 'ConversionReview'> & {
+export type ConversionReview = m2.TypeMeta<'apiextensions.k8s.io/v1', 'ConversionReview'> & {
     /**
      * request describes the attributes for the conversion request.
      */
@@ -119,12 +119,12 @@ export type CustomResourceConversion = {
  * CustomResourceDefinition represents a resource that should be exposed on the API server.  Its name MUST be in the format
  * <.spec.name>.<.spec.group>.
  */
-export type CustomResourceDefinition = m0.TypeMeta<'apiextensions.k8s.io/v1', 'CustomResourceDefinition'> & {
+export type CustomResourceDefinition = m2.TypeMeta<'apiextensions.k8s.io/v1', 'CustomResourceDefinition'> & {
     /**
      * Standard object's metadata
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
-    'metadata'?: m0.ObjectMeta;
+    'metadata'?: m2.ObjectMeta;
     /**
      * spec describes how the user wants the resources to appear
      */
@@ -141,7 +141,7 @@ export type CustomResourceDefinitionCondition = {
     /**
      * lastTransitionTime last time the condition transitioned from one status to another.
      */
-    'lastTransitionTime'?: m0.Time;
+    'lastTransitionTime'?: m2.Time;
     /**
      * message is a human-readable message indicating details about last transition.
      */
@@ -169,11 +169,11 @@ export type CustomResourceDefinitionCondition = {
 /**
  * CustomResourceDefinitionConditionType is a valid value for CustomResourceDefinitionCondition.Type
  */
-export type CustomResourceDefinitionConditionType = 'Established' | 'KubernetesAPIApprovalPolicyConformant' | 'NamesAccepted' | 'NonStructuralSchema' | 'Terminating' | (string & {});
+export type CustomResourceDefinitionConditionType = 'Established' | 'KubernetesAPIApprovalPolicyConformant' | 'NamesAccepted' | 'NonStructuralSchema' | 'StorageMigrating' | 'Terminating' | (string & {});
 /**
  * CustomResourceDefinitionList is a list of CustomResourceDefinition objects.
  */
-export type CustomResourceDefinitionList = m0.TypeMeta<'apiextensions.k8s.io/v1', 'CustomResourceDefinitionList'> & {
+export type CustomResourceDefinitionList = m2.TypeMeta<'apiextensions.k8s.io/v1', 'CustomResourceDefinitionList'> & {
     /**
      * items list individual CustomResourceDefinition objects
      */
@@ -182,7 +182,7 @@ export type CustomResourceDefinitionList = m0.TypeMeta<'apiextensions.k8s.io/v1'
      * Standard object's metadata
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
-    'metadata'?: m0.ListMeta;
+    'metadata'?: m2.ListMeta;
 };
 /**
  * CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition

package/dist/api/authentication/v1.d.ts

@@ -5,19 +5,19 @@ import * as m1 from 'kubernetypes/apimachinery/types';
  */
 export type BoundObjectReference = {
     /**
-     * API version of the referent.
+     * apiVersion is API version of the referent.
      */
     'apiVersion'?: string;
     /**
-     * Kind of the referent. Valid kinds are 'Pod' and 'Secret'.
+     * kind of the referent. Valid kinds are 'Pod' and 'Secret'.
      */
     'kind'?: string;
     /**
-     * Name of the referent.
+     * name of the referent.
      */
     'name'?: string;
     /**
-     * UID of the referent.
+     * uid of the referent.
      */
     'uid'?: m1.UID;
 };
@@ -32,12 +32,12 @@ export type ExtraValue = string[];
  */
 export type SelfSubjectReview = m0.TypeMeta<'authentication.k8s.io/v1', 'SelfSubjectReview'> & {
     /**
-     * Standard object's metadata.
+     * metadata is standard object's metadata.
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
     'metadata'?: m0.ObjectMeta;
     /**
-     * Status is filled in by the server with the user attributes.
+     * status is filled in by the server with the user attributes.
      */
     'status'?: SelfSubjectReviewStatus;
 };
@@ -46,7 +46,7 @@ export type SelfSubjectReview = m0.TypeMeta<'authentication.k8s.io/v1', 'SelfSub
  */
 export type SelfSubjectReviewStatus = {
     /**
-     * User attributes of the user making this request.
+     * userInfo is a set of attributes belonging to the user making this request.
      */
     'userInfo'?: UserInfo;
 };
@@ -55,16 +55,16 @@ export type SelfSubjectReviewStatus = {
  */
 export type TokenRequest = m0.TypeMeta<'authentication.k8s.io/v1', 'TokenRequest'> & {
     /**
-     * Standard object's metadata.
+     * metadata is the standard object's metadata.
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
     'metadata'?: m0.ObjectMeta;
     /**
-     * Spec holds information about the request being evaluated
+     * spec holds information about the request being evaluated
      */
-    'spec': TokenRequestSpec;
+    'spec'?: TokenRequestSpec;
     /**
-     * Status is filled in by the server and indicates whether the token can be authenticated.
+     * status is filled in by the server and indicates whether the token can be authenticated.
      */
     'status'?: TokenRequestStatus;
 };
@@ -73,16 +73,16 @@ export type TokenRequest = m0.TypeMeta<'authentication.k8s.io/v1', 'TokenRequest
  */
 export type TokenRequestSpec = {
     /**
-     * Audiences are the intendend audiences of the token. A recipient of a
+     * audiences are the intendend audiences of the token. A recipient of a
      * token must identify themself with an identifier in the list of
      * audiences of the token, and otherwise should reject the token. A
      * token issued for multiple audiences may be used to authenticate
      * against any of the audiences listed but implies a high degree of
      * trust between the target audiences.
      */
-    'audiences': string[];
+    'audiences'?: string[];
     /**
-     * BoundObjectRef is a reference to an object that the token will be bound to.
+     * boundObjectRef is a reference to an object that the token will be bound to.
      * The token will only be valid for as long as the bound object exists.
      * NOTE: The API server's TokenReview endpoint will validate the
      * BoundObjectRef, but other audiences may not. Keep ExpirationSeconds
@@ -90,7 +90,7 @@ export type TokenRequestSpec = {
      */
     'boundObjectRef'?: BoundObjectReference;
     /**
-     * ExpirationSeconds is the requested duration of validity of the request. The
+     * expirationSeconds is the requested duration of validity of the request. The
      * token issuer may return a token with a different validity duration so a
      * client needs to check the 'expiration' field in a response.
      */
@@ -101,13 +101,13 @@ export type TokenRequestSpec = {
  */
 export type TokenRequestStatus = {
     /**
-     * ExpirationTimestamp is the time of expiration of the returned token.
+     * expirationTimestamp is the time of expiration of the returned token.
      */
-    'expirationTimestamp': m0.Time;
+    'expirationTimestamp'?: m0.Time;
     /**
-     * Token is the opaque bearer token.
+     * token is the opaque bearer token.
      */
-    'token': string;
+    'token'?: string;
 };
 /**
  * TokenReview attempts to authenticate a token to a known user.
@@ -116,16 +116,16 @@ export type TokenRequestStatus = {
  */
 export type TokenReview = m0.TypeMeta<'authentication.k8s.io/v1', 'TokenReview'> & {
     /**
-     * Standard object's metadata.
+     * metadata is the standard object's metadata.
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
     'metadata'?: m0.ObjectMeta;
     /**
-     * Spec holds information about the request being evaluated
+     * spec holds information about the request being evaluated
      */
     'spec': TokenReviewSpec;
     /**
-     * Status is filled in by the server and indicates whether the request can be authenticated.
+     * status is filled in by the server and indicates whether the request can be authenticated.
      */
     'status'?: TokenReviewStatus;
 };
@@ -134,7 +134,7 @@ export type TokenReview = m0.TypeMeta<'authentication.k8s.io/v1', 'TokenReview'>
  */
 export type TokenReviewSpec = {
     /**
-     * Audiences is a list of the identifiers that the resource server presented
+     * audiences is a list of the identifiers that the resource server presented
      * with the token identifies as. Audience-aware token authenticators will
      * verify that the token was intended for at least one of the audiences in
      * this list. If no audiences are provided, the audience will default to the
@@ -142,16 +142,16 @@ export type TokenReviewSpec = {
      */
     'audiences'?: string[];
     /**
-     * Token is the opaque bearer token.
+     * token is the opaque bearer token.
      */
-    'token'?: string;
+    'token': string;
 };
 /**
  * TokenReviewStatus is the result of the token authentication request.
  */
 export type TokenReviewStatus = {
     /**
-     * Audiences are audience identifiers chosen by the authenticator that are
+     * audiences are audience identifiers chosen by the authenticator that are
      * compatible with both the TokenReview and token. An identifier is any
      * identifier in the intersection of the TokenReviewSpec audiences and the
      * token's audiences. A client of the TokenReview API that sets the
@@ -163,15 +163,15 @@ export type TokenReviewStatus = {
      */
     'audiences'?: string[];
     /**
-     * Authenticated indicates that the token was associated with a known user.
+     * authenticated indicates that the token was associated with a known user.
      */
     'authenticated'?: boolean;
     /**
-     * Error indicates that the token couldn't be checked
+     * error indicates that the token couldn't be checked
      */
     'error'?: string;
     /**
-     * User is the UserInfo associated with the provided token.
+     * user is the UserInfo associated with the provided token.
      */
     'user'?: UserInfo;
 };
@@ -181,23 +181,23 @@ export type TokenReviewStatus = {
  */
 export type UserInfo = {
     /**
-     * Any additional information provided by the authenticator.
+     * extra is any additional information provided by the authenticator.
      */
     'extra'?: {
         [key: string]: ExtraValue;
     };
     /**
-     * The names of groups this user is a part of.
+     * groups is the names of groups this user is a part of.
      */
     'groups'?: string[];
     /**
-     * A unique value that identifies this user across time. If this user is
+     * uid is a unique value that identifies this user across time. If this user is
      * deleted and another user by the same name is added, they will have
      * different UIDs.
      */
     'uid'?: string;
     /**
-     * The name that uniquely identifies this user among all active users.
+     * username is the name that uniquely identifies this user among all active users.
      */
     'username'?: string;
 };

package/dist/api/authentication/v1alpha1.d.ts

@@ -7,12 +7,12 @@ import * as m0 from 'kubernetypes/apimachinery/apis/meta/v1';
  */
 export type SelfSubjectReview = m0.TypeMeta<'authentication.k8s.io/v1alpha1', 'SelfSubjectReview'> & {
     /**
-     * Standard object's metadata.
+     * metadata is the standard object's metadata.
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
     'metadata'?: m0.ObjectMeta;
     /**
-     * Status is filled in by the server with the user attributes.
+     * status is filled in by the server with the user attributes.
      */
     'status'?: SelfSubjectReviewStatus;
 };
@@ -21,7 +21,7 @@ export type SelfSubjectReview = m0.TypeMeta<'authentication.k8s.io/v1alpha1', 'S
  */
 export type SelfSubjectReviewStatus = {
     /**
-     * User attributes of the user making this request.
+     * userInfo is a set of attributes belonging to the user making this request.
      */
     'userInfo'?: m1.UserInfo;
 };

package/dist/api/authentication/v1beta1.d.ts

@@ -1,5 +1,5 @@
-import * as m0 from 'kubernetypes/api/authentication/v1';
-import * as m1 from 'kubernetypes/apimachinery/apis/meta/v1';
+import * as m1 from 'kubernetypes/api/authentication/v1';
+import * as m0 from 'kubernetypes/apimachinery/apis/meta/v1';
 /**
  * ExtraValue masks the value so protobuf can generate
  */
@@ -9,14 +9,14 @@ export type ExtraValue = string[];
  * When using impersonation, users will receive the user info of the user being impersonated.  If impersonation or
  * request header authentication is used, any extra keys will have their case ignored and returned as lowercase.
  */
-export type SelfSubjectReview = m1.TypeMeta<'authentication.k8s.io/v1beta1', 'SelfSubjectReview'> & {
+export type SelfSubjectReview = m0.TypeMeta<'authentication.k8s.io/v1beta1', 'SelfSubjectReview'> & {
     /**
-     * Standard object's metadata.
+     * metadata is the standard object's metadata.
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
-    'metadata'?: m1.ObjectMeta;
+    'metadata'?: m0.ObjectMeta;
     /**
-     * Status is filled in by the server with the user attributes.
+     * status is filled in by the server with the user attributes.
      */
     'status'?: SelfSubjectReviewStatus;
 };
@@ -25,27 +25,27 @@ export type SelfSubjectReview = m1.TypeMeta<'authentication.k8s.io/v1beta1', 'Se
  */
 export type SelfSubjectReviewStatus = {
     /**
-     * User attributes of the user making this request.
+     * userInfo is a set of attributes belonging to the user making this request.
      */
-    'userInfo'?: m0.UserInfo;
+    'userInfo'?: m1.UserInfo;
 };
 /**
  * TokenReview attempts to authenticate a token to a known user.
  * Note: TokenReview requests may be cached by the webhook token authenticator
  * plugin in the kube-apiserver.
  */
-export type TokenReview = m1.TypeMeta<'authentication.k8s.io/v1beta1', 'TokenReview'> & {
+export type TokenReview = m0.TypeMeta<'authentication.k8s.io/v1beta1', 'TokenReview'> & {
     /**
-     * Standard object's metadata.
+     * metadata is the standard object's metadata.
      * More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
      */
-    'metadata'?: m1.ObjectMeta;
+    'metadata'?: m0.ObjectMeta;
     /**
-     * Spec holds information about the request being evaluated
+     * spec holds information about the request being evaluated
      */
     'spec': TokenReviewSpec;
     /**
-     * Status is filled in by the server and indicates whether the token can be authenticated.
+     * status is filled in by the server and indicates whether the token can be authenticated.
      */
     'status'?: TokenReviewStatus;
 };
@@ -54,7 +54,7 @@ export type TokenReview = m1.TypeMeta<'authentication.k8s.io/v1beta1', 'TokenRev
  */
 export type TokenReviewSpec = {
     /**
-     * Audiences is a list of the identifiers that the resource server presented
+     * audiences is a list of the identifiers that the resource server presented
      * with the token identifies as. Audience-aware token authenticators will
      * verify that the token was intended for at least one of the audiences in
      * this list. If no audiences are provided, the audience will default to the
@@ -62,16 +62,16 @@ export type TokenReviewSpec = {
      */
     'audiences'?: string[];
     /**
-     * Token is the opaque bearer token.
+     * token is the opaque bearer token.
      */
-    'token'?: string;
+    'token': string;
 };
 /**
  * TokenReviewStatus is the result of the token authentication request.
  */
 export type TokenReviewStatus = {
     /**
-     * Audiences are audience identifiers chosen by the authenticator that are
+     * audiences are audience identifiers chosen by the authenticator that are
      * compatible with both the TokenReview and token. An identifier is any
      * identifier in the intersection of the TokenReviewSpec audiences and the
      * token's audiences. A client of the TokenReview API that sets the
@@ -83,15 +83,15 @@ export type TokenReviewStatus = {
      */
     'audiences'?: string[];
     /**
-     * Authenticated indicates that the token was associated with a known user.
+     * authenticated indicates that the token was associated with a known user.
      */
     'authenticated'?: boolean;
     /**
-     * Error indicates that the token couldn't be checked
+     * error indicates that the token couldn't be checked
      */
     'error'?: string;
     /**
-     * User is the UserInfo associated with the provided token.
+     * user is the UserInfo associated with the provided token.
      */
     'user'?: UserInfo;
 };
@@ -101,23 +101,23 @@ export type TokenReviewStatus = {
  */
 export type UserInfo = {
     /**
-     * Any additional information provided by the authenticator.
+     * extra is any additional information provided by the authenticator.
      */
     'extra'?: {
         [key: string]: ExtraValue;
     };
     /**
-     * The names of groups this user is a part of.
+     * groups is the names of groups this user is a part of.
      */
     'groups'?: string[];
     /**
-     * A unique value that identifies this user across time. If this user is
+     * uid is a unique value that identifies this user across time. If this user is
      * deleted and another user by the same name is added, they will have
      * different UIDs.
      */
     'uid'?: string;
     /**
-     * The name that uniquely identifies this user among all active users.
+     * username is the name that uniquely identifies this user among all active users.
      */
     'username'?: string;
 };