Documentation ¶
Overview ¶
Package serviceaccount provides implementations to manage service accounts and service account tokens
Index ¶
- Variables
- func NewGetterFromClient(c clientset.Interface) serviceaccount.ServiceAccountTokenGetter
- func NewGetterFromRegistries(serviceAccounts serviceaccountregistry.Registry, secrets secret.Registry) serviceaccount.ServiceAccountTokenGetter
- func NewGetterFromStorageInterface(s storage.Interface) serviceaccount.ServiceAccountTokenGetter
- type ServiceAccountsController
- type ServiceAccountsControllerOptions
- type TokensController
- type TokensControllerOptions
Constants ¶
This section is empty.
Variables ¶
var RemoveTokenBackoff = wait.Backoff{ Steps: 10, Duration: 100 * time.Millisecond, Jitter: 1.0, }
RemoveTokenBackoff is the recommended (empirical) retry interval for removing a secret reference from a service account when the secret is deleted. It is exported for use by custom secret controllers.
Functions ¶
func NewGetterFromClient ¶
func NewGetterFromClient(c clientset.Interface) serviceaccount.ServiceAccountTokenGetter
NewGetterFromClient returns a ServiceAccountTokenGetter that uses the specified client to retrieve service accounts and secrets. The client should NOT authenticate using a service account token the returned getter will be used to retrieve, or recursion will result.
func NewGetterFromRegistries ¶
func NewGetterFromRegistries(serviceAccounts serviceaccountregistry.Registry, secrets secret.Registry) serviceaccount.ServiceAccountTokenGetter
NewGetterFromRegistries returns a ServiceAccountTokenGetter that uses the specified registries to retrieve service accounts and secrets.
func NewGetterFromStorageInterface ¶
func NewGetterFromStorageInterface(s storage.Interface) serviceaccount.ServiceAccountTokenGetter
NewGetterFromStorageInterface returns a ServiceAccountTokenGetter that uses the specified storage to retrieve service accounts and secrets.
Types ¶
type ServiceAccountsController ¶
type ServiceAccountsController struct {
// contains filtered or unexported fields
}
ServiceAccountsController manages ServiceAccount objects inside Namespaces
func NewServiceAccountsController ¶
func NewServiceAccountsController(cl clientset.Interface, options ServiceAccountsControllerOptions) *ServiceAccountsController
NewServiceAccountsController returns a new *ServiceAccountsController.
func (*ServiceAccountsController) Run ¶
func (e *ServiceAccountsController) Run()
Runs controller loops and returns immediately
func (*ServiceAccountsController) Stop ¶
func (e *ServiceAccountsController) Stop()
Stop gracefully shuts down this controller
type ServiceAccountsControllerOptions ¶
type ServiceAccountsControllerOptions struct { // ServiceAccounts is the list of service accounts to ensure exist in every namespace ServiceAccounts []api.ServiceAccount // ServiceAccountResync is the interval between full resyncs of ServiceAccounts. // If non-zero, all service accounts will be re-listed this often. // Otherwise, re-list will be delayed as long as possible (until the watch is closed or times out). ServiceAccountResync time.Duration // NamespaceResync is the interval between full resyncs of Namespaces. // If non-zero, all namespaces will be re-listed this often. // Otherwise, re-list will be delayed as long as possible (until the watch is closed or times out). NamespaceResync time.Duration }
ServiceAccountsControllerOptions contains options for running a ServiceAccountsController
func DefaultServiceAccountsControllerOptions ¶
func DefaultServiceAccountsControllerOptions() ServiceAccountsControllerOptions
type TokensController ¶
type TokensController struct {
// contains filtered or unexported fields
}
TokensController manages ServiceAccountToken secrets for ServiceAccount objects
func NewTokensController ¶
func NewTokensController(cl clientset.Interface, options TokensControllerOptions) *TokensController
NewTokensController returns a new *TokensController.
func (*TokensController) Run ¶
func (e *TokensController) Run()
Runs controller loops and returns immediately
func (*TokensController) Stop ¶
func (e *TokensController) Stop()
Stop gracefully shuts down this controller
type TokensControllerOptions ¶
type TokensControllerOptions struct { // TokenGenerator is the generator to use to create new tokens TokenGenerator serviceaccount.TokenGenerator // ServiceAccountResync is the time.Duration at which to fully re-list service accounts. // If zero, re-list will be delayed as long as possible ServiceAccountResync time.Duration // SecretResync is the time.Duration at which to fully re-list secrets. // If zero, re-list will be delayed as long as possible SecretResync time.Duration // This CA will be added in the secretes of service accounts RootCA []byte }
TokensControllerOptions contains options for the TokensController