acl

Documentation

Index

• Constants
• func ExtractNodeIdentities(nodeIdents []string) ([]*api.ACLNodeIdentity, error)
• func ExtractServiceIdentities(serviceIdents []string) ([]*api.ACLServiceIdentity, error)
• func GetBindingRuleIDFromPartial(client *api.Client, partialID string) (string, error)
• func GetPolicyByName(client *api.Client, name string) (*api.ACLPolicy, error)
• func GetPolicyIDByName(client *api.Client, name string) (string, error)
• func GetPolicyIDFromPartial(client *api.Client, partialID string) (string, error)
• func GetRoleIDByName(client *api.Client, name string) (string, error)
• func GetRoleIDFromPartial(client *api.Client, partialID string) (string, error)
• func GetRulesFromLegacyToken(client *api.Client, tokenID string, isSecret bool) (string, error)
• func GetTokenIDFromPartial(client *api.Client, partialID string) (string, error)
• func New() *cmd

Constants

const TestKubernetesJWT_A = "" /* 834-byte string literal not displayed */

TestKubernetesJWT_A is a valid service account jwt extracted from a minikube setup.

{
  "iss": "kubernetes/serviceaccount",
  "kubernetes.io/serviceaccount/namespace": "default",
  "kubernetes.io/serviceaccount/secret.name": "admin-token-qlz42",
  "kubernetes.io/serviceaccount/service-account.name": "admin",
  "kubernetes.io/serviceaccount/service-account.uid": "738bc251-6532-11e9-b67f-48e6c8b8ecb5",
  "sub": "system:serviceaccount:default:admin"
}

const TestKubernetesJWT_B = "" /* 830-byte string literal not displayed */

TestKubernetesJWT_B is a valid service account jwt extracted from a minikube setup.

{ "iss": "kubernetes/serviceaccount", "kubernetes.io/serviceaccount/namespace": "default", "kubernetes.io/serviceaccount/secret.name": "demo-token-kmb9n", "kubernetes.io/serviceaccount/service-account.name": "demo", "kubernetes.io/serviceaccount/service-account.uid": "76091af4-4b56-11e9-ac4b-708b11801cbe", "sub": "system:serviceaccount:default:demo" }

Functions

func ExtractNodeIdentities

func ExtractNodeIdentities(nodeIdents []string) ([]*api.ACLNodeIdentity, error)

func ExtractServiceIdentities

func ExtractServiceIdentities(serviceIdents []string) ([]*api.ACLServiceIdentity, error)

func GetBindingRuleIDFromPartial

func GetBindingRuleIDFromPartial(client *api.Client, partialID string) (string, error)

func GetPolicyByName

func GetPolicyByName(client *api.Client, name string) (*api.ACLPolicy, error)

func GetPolicyIDByName

func GetPolicyIDByName(client *api.Client, name string) (string, error)

func GetPolicyIDFromPartial

func GetPolicyIDFromPartial(client *api.Client, partialID string) (string, error)

func GetRoleIDByName

func GetRoleIDByName(client *api.Client, name string) (string, error)

func GetRoleIDFromPartial

func GetRoleIDFromPartial(client *api.Client, partialID string) (string, error)

func GetRulesFromLegacyToken

func GetRulesFromLegacyToken(client *api.Client, tokenID string, isSecret bool) (string, error)

func GetTokenIDFromPartial

func GetTokenIDFromPartial(client *api.Client, partialID string) (string, error)

func New

func New() *cmd