Documentation

Index

Constants

View Source
const (
	KubeJWTAuthenticatorType = "KubeJWTAuthenticator"
)

Variables

This section is empty.

Functions

This section is empty.

Types

type KubeJWTAuthenticator

type KubeJWTAuthenticator struct {
	// contains filtered or unexported fields
}

    KubeJWTAuthenticator authenticates K8s JWTs.

    func NewKubeJWTAuthenticator

    func NewKubeJWTAuthenticator(client kubernetes.Interface, clusterID string,
    	remoteKubeClientGetter RemoteKubeClientGetter,
    	trustDomain, jwtPolicy string) *KubeJWTAuthenticator

      NewKubeJWTAuthenticator creates a new kubeJWTAuthenticator.

      func (*KubeJWTAuthenticator) Authenticate

      func (a *KubeJWTAuthenticator) Authenticate(ctx context.Context) (*security.Caller, error)

        Authenticate authenticates the call using the K8s JWT from the context. The returned Caller.Identities is in SPIFFE format.

        func (*KubeJWTAuthenticator) AuthenticatorType

        func (a *KubeJWTAuthenticator) AuthenticatorType() string

        func (*KubeJWTAuthenticator) GetKubeClient

        func (a *KubeJWTAuthenticator) GetKubeClient(clusterID string) kubernetes.Interface

        type RemoteKubeClientGetter

        type RemoteKubeClientGetter func(clusterID string) kubernetes.Interface

        Source Files