authentication

Documentation

Index

• Constants
• func SyntheticImpersonationConfig(ext ocv1.ClusterExtension) transport.ImpersonationConfig
• type ServiceAccountNotFoundError
  • func (e *ServiceAccountNotFoundError) Error() string
  • func (e *ServiceAccountNotFoundError) Unwrap() error
• type TokenGetter
  • func NewTokenGetter(client corev1.ServiceAccountsGetter, options ...TokenGetterOption) *TokenGetter
  • func (t *TokenGetter) Delete(key types.NamespacedName)
  • func (t *TokenGetter) Get(ctx context.Context, key types.NamespacedName) (string, error)
• type TokenGetterOption
  • func WithExpirationDuration(expirationDuration time.Duration) TokenGetterOption
• type TokenInjectingRoundTripper
  • func (tt *TokenInjectingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error)

Constants

const (
	DefaultExpirationDuration = 5 * time.Minute
)

Functions

func SyntheticImpersonationConfig

func SyntheticImpersonationConfig(ext ocv1.ClusterExtension) transport.ImpersonationConfig

Types

type ServiceAccountNotFoundError

type ServiceAccountNotFoundError struct {
	ServiceAccountName      string
	ServiceAccountNamespace string
	Err                     error
}

func (*ServiceAccountNotFoundError) Error

func (e *ServiceAccountNotFoundError) Error() string

Error implements the error interface for ServiceAccountNotFoundError.

func (*ServiceAccountNotFoundError) Unwrap

func (e *ServiceAccountNotFoundError) Unwrap() error

type TokenGetter

type TokenGetter struct {
	// contains filtered or unexported fields
}

func NewTokenGetter

func NewTokenGetter(client corev1.ServiceAccountsGetter, options ...TokenGetterOption) *TokenGetter

Returns a token getter that can fetch tokens given a service account. The token getter also caches tokens which helps reduce the number of requests to the API Server. In case a cached token is expiring a fresh token is created.

func (*TokenGetter) Delete

func (t *TokenGetter) Delete(key types.NamespacedName)

func (*TokenGetter) Get

func (t *TokenGetter) Get(ctx context.Context, key types.NamespacedName) (string, error)

Get returns a token from the cache if available and not expiring, otherwise creates a new token

type TokenGetterOption

type TokenGetterOption func(*TokenGetter)

func WithExpirationDuration

func WithExpirationDuration(expirationDuration time.Duration) TokenGetterOption

type TokenInjectingRoundTripper

type TokenInjectingRoundTripper struct {
	Tripper     http.RoundTripper
	TokenGetter *TokenGetter
	Key         types.NamespacedName
}

func (*TokenInjectingRoundTripper) RoundTrip

func (tt *TokenInjectingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error)