authenticator

Documentation

Index

• func IsValidServiceAccountKeyFile(file string) bool
• func New(config AuthenticatorConfig) (authenticator.Request, error)
• func NewAuthenticatorFromTokens(tokens map[string]*user.DefaultInfo) authenticator.Request
• type AuthenticatorConfig

Functions

func IsValidServiceAccountKeyFile

func IsValidServiceAccountKeyFile(file string) bool

IsValidServiceAccountKeyFile returns true if a valid public RSA key can be read from the given file

func New

func New(config AuthenticatorConfig) (authenticator.Request, error)

New returns an authenticator.Request or an error that supports the standard Kubernetes authentication mechanisms.

func NewAuthenticatorFromTokens

func NewAuthenticatorFromTokens(tokens map[string]*user.DefaultInfo) authenticator.Request

newAuthenticatorFromToken returns an authenticator.Request or an error

Types

type AuthenticatorConfig

type AuthenticatorConfig struct {
	Anonymous                   bool
	AnyToken                    bool
	BasicAuthFile               string
	ClientCAFile                string
	TokenAuthFile               string
	OIDCIssuerURL               string
	OIDCClientID                string
	OIDCCAFile                  string
	OIDCUsernameClaim           string
	OIDCGroupsClaim             string
	ServiceAccountKeyFile       string
	ServiceAccountLookup        bool
	ServiceAccountTokenGetter   serviceaccount.ServiceAccountTokenGetter
	KeystoneURL                 string
	WebhookTokenAuthnConfigFile string
	WebhookTokenAuthnCacheTTL   time.Duration
}