tokenrequest

Documentation

Index

• func GenerateGenericTokenKubeconfig(ctx context.Context, secretsManager secretsmanager.Interface, ...) (*corev1.Secret, error)
• func IsTokenPopulated(secret *corev1.Secret) (bool, error)
• func RenewAccessSecrets(ctx context.Context, c client.Client, namespace string) error

Functions

func GenerateGenericTokenKubeconfig

func GenerateGenericTokenKubeconfig(ctx context.Context, secretsManager secretsmanager.Interface, namespace, kubeAPIServerAddress string) (*corev1.Secret, error)

GenerateGenericTokenKubeconfig generates a generic token kubeconfig in the given namespace for the given kube-apiserver address

func IsTokenPopulated

func IsTokenPopulated(secret *corev1.Secret) (bool, error)

IsTokenPopulated checks if a `kubeconfig` secret already contains a token.

func RenewAccessSecrets

func RenewAccessSecrets(ctx context.Context, c client.Client, namespace string) error

RenewAccessSecrets drops the serviceaccount.resources.gardener.cloud/token-renew-timestamp annotation from all access secrets. This will make the TokenRequestor controller part of gardener-resource-manager issuing new tokens immediately.