identity

Documentation

Index

• Variables
• func BeginIdentityKeyRotation(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*corev1.Secret, error)
• func CompleteIdentityKeyRotation(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*string, error)
• func CreateNewTokenVersion(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*corev1.Secret, error)
• func GetKubeconfig(cli kubernetes.Clientset, token *ServiceAccountToken, ...) ([]byte, error)
• func RevokeIdentityKey(ctx context.Context, cli kubernetes.Clientset, name string, namespace string, ...) (*string, error)
• func RollbackIdentityKey(ctx context.Context, cli kubernetes.Clientset, name string, namespace string, ...) (*corev1.Secret, error)
• type GetKubeconfigOptions
• type Instance
  • func CreateIdentity(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*Instance, error)
• type ServiceAccountToken
  • func GetToken(secret *corev1.Secret) (*ServiceAccountToken, error)

Variables

var ErrSecretMalformed = fmt.Errorf("service account's secret malformed")

Functions

func BeginIdentityKeyRotation

func BeginIdentityKeyRotation(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*corev1.Secret, error)

func CompleteIdentityKeyRotation

func CompleteIdentityKeyRotation(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*string, error)

func CreateNewTokenVersion

func CreateNewTokenVersion(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*corev1.Secret, error)

func GetKubeconfig

func GetKubeconfig(cli kubernetes.Clientset, token *ServiceAccountToken, opts GetKubeconfigOptions) ([]byte, error)

func RevokeIdentityKey

func RevokeIdentityKey(ctx context.Context, cli kubernetes.Clientset, name string, namespace string, version uint64) (*string, error)

func RollbackIdentityKey

func RollbackIdentityKey(ctx context.Context, cli kubernetes.Clientset, name string, namespace string, version uint64) (*corev1.Secret, error)

Types

type GetKubeconfigOptions

type GetKubeconfigOptions struct {
	OverrideHost *string
	User         *string
	Namespace    *string
}

type Instance

type Instance struct {
	Namespace      string   `json:"namespace"`
	ServiceAccount string   `json:"serviceAccount"`
	Secrets        []string `json:"secrets"`
}

func CreateIdentity

func CreateIdentity(ctx context.Context, cli kubernetes.Clientset, name string, namespace string) (*Instance, error)

type ServiceAccountToken

type ServiceAccountToken struct {
	CACrt     []byte `json:"ca.crt"`
	Namespace []byte `json:"namespace"`
	Token     []byte `json:"token"`
}

func GetToken

func GetToken(secret *corev1.Secret) (*ServiceAccountToken, error)