auth

Documentation

Index

• Constants
• type FakeGCPTokenSource
  • func (ts *FakeGCPTokenSource) Token() (*oauth2.Token, error)
• type GCPTokenSource
  • func (ts *GCPTokenSource) Token() (*oauth2.Token, error)
• type TokenManager
  • func NewFakeTokenManager() TokenManager
  • func NewTokenManager(meta metadata.Service, clientset clientset.Interface) TokenManager

Constants

const (
	VolumeContextKeyServiceAccountName = "csi.storage.k8s.io/serviceAccount.name"
	VolumeContextKeyPodNamespace       = "csi.storage.k8s.io/pod.namespace"
)

NodePublishVolume VolumeContext keys.

Types

type FakeGCPTokenSource

type FakeGCPTokenSource struct {
	// contains filtered or unexported fields
}

func (*FakeGCPTokenSource) Token

func (ts *FakeGCPTokenSource) Token() (*oauth2.Token, error)

type GCPTokenSource

type GCPTokenSource struct {
	// contains filtered or unexported fields
}

GCPTokenSource generates a GCP IAM SA token with a Kubernetes Service Account token.

func (*GCPTokenSource) Token

func (ts *GCPTokenSource) Token() (*oauth2.Token, error)

Token exchanges a GCP IAM SA Token with a Kubernetes Service Account token.

type TokenManager

type TokenManager interface {
	GetTokenSourceFromK8sServiceAccount(saNamespace, saName, saToken string) oauth2.TokenSource
}

func NewFakeTokenManager

func NewFakeTokenManager() TokenManager

func NewTokenManager

func NewTokenManager(meta metadata.Service, clientset clientset.Interface) TokenManager