package authenticator

import "k8s.io/kubernetes/pkg/apiserver/authenticator"

Index ¶

• func IsValidServiceAccountKeyFile(file string) bool
• func New(config AuthenticatorConfig) (authenticator.Request, error)
• func NewAuthenticatorFromTokens(tokens map[string]*user.DefaultInfo) authenticator.Request
• type AuthenticatorConfig

Functions ¶

func IsValidServiceAccountKeyFile ¶

func IsValidServiceAccountKeyFile(file string) bool

IsValidServiceAccountKeyFile returns true if a valid public RSA key can be read from the given file

func New ¶

func New(config AuthenticatorConfig) (authenticator.Request, error)

New returns an authenticator.Request or an error that supports the standard Kubernetes authentication mechanisms.

func NewAuthenticatorFromTokens ¶

func NewAuthenticatorFromTokens(tokens map[string]*user.DefaultInfo) authenticator.Request

newAuthenticatorFromToken returns an authenticator.Request or an error

Types ¶

type AuthenticatorConfig ¶

type AuthenticatorConfig struct {
	Anonymous                   bool
	AnyToken                    bool
	BasicAuthFile               string
	ClientCAFile                string
	TokenAuthFile               string
	OIDCIssuerURL               string
	OIDCClientID                string
	OIDCCAFile                  string
	OIDCUsernameClaim           string
	OIDCGroupsClaim             string
	ServiceAccountKeyFiles      []string
	ServiceAccountLookup        bool
	ServiceAccountTokenGetter   serviceaccount.ServiceAccountTokenGetter
	KeystoneURL                 string
	WebhookTokenAuthnConfigFile string
	WebhookTokenAuthnCacheTTL   time.Duration
}

Source Files ¶

authn.go