irsa

Documentation

Overview

Package irsa implements tester for IAM Roles for Service Accounts (IRSA).

Index

• Constants
• type Config
• type Tester
  • func New(cfg Config) (Tester, error)

Constants

const TemplateConfigMap = `` /* 1021-byte string literal not displayed */

TemplateConfigMap is the IRSA config map.

const TemplateDeploymentScript = `` /* 286-byte string literal not displayed */

TemplateDeploymentScript is the script to run in Deployment.

const TemplateRole = `` /* 1272-byte string literal not displayed */

TemplateRole is the CloudFormation template for EKS IRSA role.

Types

type Config

type Config struct {
	Logger    *zap.Logger
	Stopc     chan struct{}
	Sig       chan os.Signal
	EKSConfig *eksconfig.Config
	K8SClient k8sClientSetGetter
	CFNAPI    cloudformationiface.CloudFormationAPI
	IAMAPI    iamiface.IAMAPI
	S3API     s3iface.S3API
}

Config defines "Secrets" configuration. ref. https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/

type Tester

type Tester interface {
	// Create creates "ServiceAccountToken" objects to test IRSA.
	Create() error
	// Delete deletes "ServiceAccountToken" and Pods.
	Delete() error
	// AggregateResults aggregates all test results from remote nodes.
	// Assumes logs are already downloaded.
	AggregateResults() error
}

Tester defines IRSA tester.

func New

func New(cfg Config) (Tester, error)

New creates a new Job tester.