Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

clusteraccess

package

Go to main page

Versions in this module

v0

v0.17.0

Aug 12, 2025

Changes in this version

+ func CreateOIDCKubeconfig(user, host string, caData []byte, issuer, clientID string, ...) ([]byte, error)

+ type CreateOIDCKubeconfigOption func(*CreateOIDCKubeconfigOptions)

+ func ForceRefresh() CreateOIDCKubeconfigOption

+ func UsePKCE() CreateOIDCKubeconfigOption

+ func WithClientSecret(clientSecret string) CreateOIDCKubeconfigOption

+ func WithClusterName(clusterName string) CreateOIDCKubeconfigOption

+ func WithContextName(contextName string) CreateOIDCKubeconfigOption

+ func WithExtraScope(scope string) CreateOIDCKubeconfigOption

+ func WithGrantType(grantType OIDCGrantType) CreateOIDCKubeconfigOption

+ type CreateOIDCKubeconfigOptions struct

+ CAData []byte

+ ClientID string

+ ClientSecret string

+ ClusterName string

+ ContextName string

+ ExtraScopes []string

+ ForceRefresh bool

+ GrantType OIDCGrantType

+ Host string

+ Issuer string

+ UsePKCE bool

+ User string

+ type OIDCGrantType string

+ const GrantTypeAuthCode

+ const GrantTypeAuthCodeKeyboard

+ const GrantTypeAuto

+ const GrantTypeDeviceCode

+ const GrantTypePassword

v0.16.0

Aug 7, 2025

v0.15.0

Aug 5, 2025

v0.14.0

Jul 30, 2025

v0.13.1

Jul 23, 2025

v0.13.0

Jul 21, 2025

v0.12.0

Jul 14, 2025

v0.11.0

Jun 30, 2025

Changes in this version

+ func WriteKubeconfigFromRESTConfig(restConfig *rest.Config) ([]byte, error)

+ func WriteOIDCConfigFromRESTConfig(restConfig *rest.Config) ([]byte, error)

v0.10.0

Jun 4, 2025

v0.9.0

May 20, 2025

Changes in this version

+ func ComputeTokenRenewalTime(creationTime, expirationTime time.Time) time.Time

+ func ComputeTokenRenewalTimeWithRatio(creationTime, expirationTime time.Time, ratio float64) time.Time

+ func CreateTokenKubeconfig(user, host string, caData []byte, token string) ([]byte, error)

+ func EnsureClusterRole(ctx context.Context, c client.Client, name string, rules []rbacv1.PolicyRule, ...) (*rbacv1.ClusterRole, error)

+ func EnsureClusterRoleAndBinding(ctx context.Context, c client.Client, name string, subjects []rbacv1.Subject, ...) (*rbacv1.ClusterRoleBinding, *rbacv1.ClusterRole, error)

+ func EnsureClusterRoleBinding(ctx context.Context, c client.Client, name, clusterRoleName string, ...) (*rbacv1.ClusterRoleBinding, error)

+ func EnsureNamespace(ctx context.Context, c client.Client, nsName string, expectedLabels ...Label) (*corev1.Namespace, error)

+ func EnsureRole(ctx context.Context, c client.Client, name, namespace string, ...) (*rbacv1.Role, error)

+ func EnsureRoleAndBinding(ctx context.Context, c client.Client, name, namespace string, ...) (*rbacv1.RoleBinding, *rbacv1.Role, error)

+ func EnsureRoleBinding(ctx context.Context, c client.Client, name, namespace, roleName string, ...) (*rbacv1.RoleBinding, error)

+ func EnsureServiceAccount(ctx context.Context, c client.Client, saName, saNamespace string, ...) (*corev1.ServiceAccount, error)

+ func FailIfNotManaged(obj client.Object, expectedLabels ...Label) error

+ func IsResourceNotManagedError(err error) bool

+ type Label = pairs.Pair[string, string]

+ type ResourceNotManagedError struct

+ ExpectedLabels []Label

+ Obj client.Object

+ func NewResourceNotManagedError(obj client.Object, expectedLabels ...Label) *ResourceNotManagedError

+ func (e *ResourceNotManagedError) Error() string

+ type ServiceAccountToken struct

+ CreationTimestamp time.Time

+ ExpirationTimestamp time.Time

+ Token string

+ func CreateTokenForServiceAccount(ctx context.Context, c client.Client, sa *corev1.ServiceAccount, ...) (*ServiceAccountToken, error)

+ func GetTokenBasedAccess(ctx context.Context, c client.Client, restCfg *rest.Config, ...) ([]byte, *ServiceAccountToken, error)