token

Documentation

Overview

Package token implements a manager of serviceaccount tokens for pods running on the node.

Index

• type Manager
  • func NewManager(c clientset.Interface) *Manager
  • func (m *Manager) DeleteServiceAccountToken(podUID types.UID)
  • func (m *Manager) GetServiceAccountToken(namespace, name string, tr *authenticationv1.TokenRequest) (*authenticationv1.TokenRequest, error)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

Manager manages service account tokens for pods.

func NewManager

func NewManager(c clientset.Interface) *Manager

NewManager returns a new token manager.

func (*Manager) DeleteServiceAccountToken

func (m *Manager) DeleteServiceAccountToken(podUID types.UID)

DeleteServiceAccountToken should be invoked when pod got deleted. It simply clean token manager cache.

func (*Manager) GetServiceAccountToken

func (m *Manager) GetServiceAccountToken(namespace, name string, tr *authenticationv1.TokenRequest) (*authenticationv1.TokenRequest, error)

GetServiceAccountToken gets a service account token for a pod from cache or from the TokenRequest API. This process is as follows: * Check the cache for the current token request. * If the token exists and does not require a refresh, return the current token. * Attempt to refresh the token. * If the token is refreshed successfully, save it in the cache and return the token. * If refresh fails and the old token is still valid, log an error and return the old token. * If refresh fails and the old token is no longer valid, return an error