serviceaccounts

Documentation

Index

• func Clients(config kclient.Config, tokenRetriever TokenRetriever, namespace, name string) (*client.Client, *kclient.Client, error)
• func IsValidServiceAccountToken(serviceAccount *kapi.ServiceAccount, secret *kapi.Secret) bool
• type ClientLookupTokenRetriever
  • func (s *ClientLookupTokenRetriever) GetToken(namespace, name string) (string, error)
• type TokenRetriever

Functions

func Clients

func Clients(config kclient.Config, tokenRetriever TokenRetriever, namespace, name string) (*client.Client, *kclient.Client, error)

Clients returns an OpenShift and Kubernetes client with the credentials of the named service account TODO: change return types to client.Interface/kclient.Interface to allow auto-reloading credentials

func IsValidServiceAccountToken

func IsValidServiceAccountToken(serviceAccount *kapi.ServiceAccount, secret *kapi.Secret) bool

IsValidServiceAccountToken returns true if the given secret contains a service account token valid for the given service account

Types

type ClientLookupTokenRetriever

type ClientLookupTokenRetriever struct {
	Client kclient.Interface
}

ClientLookupTokenRetriever uses its client to look up a service account token

func (*ClientLookupTokenRetriever) GetToken

func (s *ClientLookupTokenRetriever) GetToken(namespace, name string) (string, error)

GetToken returns a token for the named service account or an error if none existed after a timeout

type TokenRetriever

type TokenRetriever interface {
	GetToken(serviceAccountNamespace, serviceAccountName string) (token string, err error)
}

TokenRetriever defined an interface for getting an API token for a service account