kubejwt

Documentation

Index

• func GetKubernetesClient() (*kubernetes.Clientset, error)
• type JWTAuthInterceptor
  • func NewJWTAuthInterceptor(clientset *kubernetes.Clientset, issuer, audience string, ...) *JWTAuthInterceptor
  • func (i *JWTAuthInterceptor) Stream() grpc.StreamServerInterceptor

Functions

func GetKubernetesClient

func GetKubernetesClient() (*kubernetes.Clientset, error)

GetKubernetesClient creates a Kubernetes client using in-cluster configuration.

Types

type JWTAuthInterceptor

type JWTAuthInterceptor struct {
	// contains filtered or unexported fields
}

JWTAuthInterceptor verifies Kubernetes Service Account JWT tokens in gRPC requests.

func NewJWTAuthInterceptor

func NewJWTAuthInterceptor(clientset *kubernetes.Clientset, issuer, audience string, cache cache.SnapshotCacheWithCallbacks) *JWTAuthInterceptor

NewJWTAuthInterceptor initializes a new JWTAuthInterceptor.

func (*JWTAuthInterceptor) Stream

func (i *JWTAuthInterceptor) Stream() grpc.StreamServerInterceptor

Stream intercepts streaming gRPC calls for authorization.