tokenreview

Documentation

Index

• func ValidateK8sJwt(kubeClient kubernetes.Interface, targetToken string, aud []string) ([]string, error)

Functions

func ValidateK8sJwt

func ValidateK8sJwt(kubeClient kubernetes.Interface, targetToken string, aud []string) ([]string, error)

ValidateK8sJwt validates a k8s JWT at API server. Return {<namespace>, <serviceaccountname>} in the targetToken when the validation passes. Otherwise, return the error. targetToken: the JWT of the K8s service account to be reviewed aud: list of audiences to check. If empty 1st party tokens will be checked.