package token

import "k8s.io/kubernetes/cmd/kubeadm/app/discovery/token"

Index ¶

• Constants
• func RetrieveValidatedClusterInfo(discoveryToken string, tokenAPIServers, rootCAPubKeys []string) (*clientcmdapi.Cluster, error)

Constants ¶

const BootstrapUser = "token-bootstrap-client"

Functions ¶

func RetrieveValidatedClusterInfo ¶

func RetrieveValidatedClusterInfo(discoveryToken string, tokenAPIServers, rootCAPubKeys []string) (*clientcmdapi.Cluster, error)

RetrieveValidatedClusterInfo connects to the API Server and tries to fetch the cluster-info ConfigMap It then makes sure it can trust the API Server by looking at the JWS-signed tokens and (if rootCAPubKeys is not empty) validating the cluster CA against a set of pinned public keys

Source Files ¶

token.go