identity

package
v0.21.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 4, 2021 License: Apache-2.0 Imports: 16 Imported by: 10

Documentation

Overview

Package identity contains the identity reconciler

Index

Constants

View Source
const (
	Role = "roles/iam.workloadIdentityUser"
)

Variables

This section is empty.

Functions

This section is empty.

Types

type Identity

type Identity struct {
	// contains filtered or unexported fields
}

func NewIdentity

func NewIdentity(ctx context.Context, policyManager iam.IAMPolicyManager, gcpAuthStore *gcpauth.Store) *Identity

func (*Identity) DeleteWorkloadIdentity

func (i *Identity) DeleteWorkloadIdentity(ctx context.Context, projectID string, identifiable duck.Identifiable) error

DeleteWorkloadIdentity will remove iam policy binding between k8s service account and its corresponding GCP service account, if this k8s service account only has one ownerReference.

func (*Identity) ReconcileWorkloadIdentity

func (i *Identity) ReconcileWorkloadIdentity(ctx context.Context, projectID string, identifiable duck.Identifiable) (*corev1.ServiceAccount, error)

ReconcileWorkloadIdentity will create a k8s service account, add ownerReference to it, and add iam policy binding between this k8s service account and its corresponding GCP service account.

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL