identity

Documentation

Index

• Constants
• func NewClientCertificateCredential(tenantID, clientID string, clientCertificate, password []byte) (*azidentity.ClientCertificateCredential, error)
• type Credential
  • func NewDefaultCredential(tokenCred azcore.TokenCredential, namespace string, subscriptionID string) *Credential
  • func (c *Credential) CredentialFrom() types.NamespacedName
  • func (c *Credential) SecretsEqual(other *Credential) bool
  • func (c *Credential) SubscriptionID() string
  • func (c *Credential) TokenCredential() azcore.TokenCredential
• type CredentialProvider
  • func NewCredentialProvider(globalCredential *Credential, kubeClient kubeclient.Client, ...) CredentialProvider
• type CredentialProviderOptions
• type TokenCredentialProvider
  • func DefaultTokenCredentialProvider() TokenCredentialProvider

Constants

const (

	// #nosec
	NamespacedSecretName = "aso-credential"
	// #nosec
	FederatedTokenFilePath = "/var/run/secrets/tokens/azure-identity"
)

Functions

func NewClientCertificateCredential

func NewClientCertificateCredential(tenantID, clientID string, clientCertificate, password []byte) (*azidentity.ClientCertificateCredential, error)

Types

type Credential

type Credential struct {
	// contains filtered or unexported fields
}

Credential describes a credential used to connect to Azure

func NewDefaultCredential

func NewDefaultCredential(tokenCred azcore.TokenCredential, namespace string, subscriptionID string) *Credential

func (*Credential) CredentialFrom

func (c *Credential) CredentialFrom() types.NamespacedName

func (*Credential) SecretsEqual

func (c *Credential) SecretsEqual(other *Credential) bool

func (*Credential) SubscriptionID

func (c *Credential) SubscriptionID() string

func (*Credential) TokenCredential

func (c *Credential) TokenCredential() azcore.TokenCredential

type CredentialProvider

type CredentialProvider interface {
	GetCredential(ctx context.Context, obj genruntime.MetaObject) (*Credential, error)
}

func NewCredentialProvider

func NewCredentialProvider(
	globalCredential *Credential,
	kubeClient kubeclient.Client,
	opts *CredentialProviderOptions,
) CredentialProvider

type CredentialProviderOptions

type CredentialProviderOptions struct {
	TokenProvider TokenCredentialProvider
}

type TokenCredentialProvider

type TokenCredentialProvider interface {
	NewClientSecretCredential(tenantID string, clientID string, clientSecret string, options *azidentity.ClientSecretCredentialOptions) (*azidentity.ClientSecretCredential, error)
	NewClientCertificateCredential(tenantID, clientID string, clientCertificate, password []byte) (*azidentity.ClientCertificateCredential, error)
	NewManagedIdentityCredential(options *azidentity.ManagedIdentityCredentialOptions) (*azidentity.ManagedIdentityCredential, error)
	NewWorkloadIdentityCredential(options *azidentity.WorkloadIdentityCredentialOptions) (*azidentity.WorkloadIdentityCredential, error)
}

func DefaultTokenCredentialProvider

func DefaultTokenCredentialProvider() TokenCredentialProvider