serviceaccounts

Documentation

Index

• func Clients(config restclient.Config, tokenRetriever TokenRetriever, ...) (*restclient.Config, *client.Client, kclientsetinternal.Interface, ...)
• func IsValidServiceAccountToken(serviceAccount *kapi.ServiceAccount, secret *kapi.Secret) bool
• type ClientLookupTokenRetriever
  • func (s *ClientLookupTokenRetriever) GetToken(namespace, name string) (string, error)
• type TokenRetriever

Functions

func Clients

func Clients(
	config restclient.Config,
	tokenRetriever TokenRetriever,
	namespace,
	name string,
) (*restclient.Config, *client.Client, kclientsetinternal.Interface, kclientsetexternal.Interface, error)

Clients returns an OpenShift and Kubernetes client with the credentials of the named service account TODO: change return types to client.Interface/kclientset.Interface to allow auto-reloading credentials

func IsValidServiceAccountToken

func IsValidServiceAccountToken(serviceAccount *kapi.ServiceAccount, secret *kapi.Secret) bool

IsValidServiceAccountToken returns true if the given secret contains a service account token valid for the given service account

Types

type ClientLookupTokenRetriever

type ClientLookupTokenRetriever struct {
	Client kclientsetinternal.Interface
}

ClientLookupTokenRetriever uses its client to look up a service account token

func (*ClientLookupTokenRetriever) GetToken

func (s *ClientLookupTokenRetriever) GetToken(namespace, name string) (string, error)

GetToken returns a token for the named service account or an error if none existed after a timeout

type TokenRetriever

type TokenRetriever interface {
	GetToken(serviceAccountNamespace, serviceAccountName string) (token string, err error)
}

TokenRetriever defined an interface for getting an API token for a service account