keychain

Documentation

Index

• Constants
• type KeychainStore
  • func (k *KeychainStore) RetrieveCredentials(cluster, credentialsType string) (*KubernetesCredentials, error)
  • func (k *KeychainStore) RetrieveRegistration(rawKeyhandle []byte) (*u2f.Registration, error)
  • func (k *KeychainStore) StoreCredentials(credentials *KubernetesCredentials) error
  • func (k *KeychainStore) StoreRegistration(registration *u2f.Registration) error
• type KubernetesCredentials
  • func (c *KubernetesCredentials) ToKeychainPayload() ([]byte, error)

Constants

const (
	CredentialsTypePrivileged   = "privileged"
	CredentialsTypeUnprivileged = "unprivileged"
)

Types

type KeychainStore

type KeychainStore struct{}

func (*KeychainStore) RetrieveCredentials

func (k *KeychainStore) RetrieveCredentials(cluster, credentialsType string) (*KubernetesCredentials, error)

func (*KeychainStore) RetrieveRegistration

func (k *KeychainStore) RetrieveRegistration(rawKeyhandle []byte) (*u2f.Registration, error)

func (*KeychainStore) StoreCredentials

func (k *KeychainStore) StoreCredentials(credentials *KubernetesCredentials) error

func (*KeychainStore) StoreRegistration

func (k *KeychainStore) StoreRegistration(registration *u2f.Registration) error

type KubernetesCredentials

type KubernetesCredentials struct {
	Cluster         string `json:"cluster"`
	ExpectedExpiry  string `json:"expected_expiry"`
	CredentialsType string `json:"credentials_type"`
	AccessToken     string `json:"access_token"`
	RefreshToken    string `json:"refresh_token"`

	// KeyHandle from U2F is set by the package for privileged credentials only
	KeyHandle string `json:"keyhandle"`
}

KubernetesCredentials represents OIDC tokens issued for access to

func (*KubernetesCredentials) ToKeychainPayload

func (c *KubernetesCredentials) ToKeychainPayload() ([]byte, error)