google

Documentation

Index

• Constants
• type GkeTaskWorkloadIdentityTokenSourceFactoryConfig
• type Identity
• type TokenSourceFactory
  • func NewDefaultTokenSourceFactory() (TokenSourceFactory, error)
  • func NewGkeTaskWorkloadIdentityTokenSourceFactory(config *GkeTaskWorkloadIdentityTokenSourceFactoryConfig) (TokenSourceFactory, error)
  • func NewTokenSourceFactory(config TokenSourceFactoryConfig) (TokenSourceFactory, error)
• type TokenSourceFactoryConfig
  • func GetDefaultConfig() TokenSourceFactoryConfig
• type TokenSourceFactoryType

Constants

const (
	TokenSourceTypeDefault                 = "default"
	TokenSourceTypeGkeTaskWorkloadIdentity = "gke-task-workload-identity" // #nosec
)

Types

type GkeTaskWorkloadIdentityTokenSourceFactoryConfig

type GkeTaskWorkloadIdentityTokenSourceFactoryConfig struct {
	RemoteClusterConfig pluginmachinery.ClusterConfig `json:"remoteClusterConfig" pflag:"Configuration of remote GKE cluster"`
}

type Identity

type Identity struct {
	K8sNamespace      string
	K8sServiceAccount string
}

type TokenSourceFactory

type TokenSourceFactory interface {
	GetTokenSource(ctx context.Context, identity Identity) (oauth2.TokenSource, error)
}

func NewDefaultTokenSourceFactory

func NewDefaultTokenSourceFactory() (TokenSourceFactory, error)

func NewGkeTaskWorkloadIdentityTokenSourceFactory

func NewGkeTaskWorkloadIdentityTokenSourceFactory(
	config *GkeTaskWorkloadIdentityTokenSourceFactoryConfig,
) (TokenSourceFactory, error)

func NewTokenSourceFactory

func NewTokenSourceFactory(config TokenSourceFactoryConfig) (TokenSourceFactory, error)

type TokenSourceFactoryConfig

type TokenSourceFactoryConfig struct {
	// Type is type of TokenSourceFactory, possible values are 'default' or 'gke-task-workload-identity'.
	// - 'default' uses default credentials, see https://cloud.google.com/iam/docs/service-accounts#default
	Type TokenSourceFactoryType `json:"type" pflag:",Defines type of TokenSourceFactory, possible values are 'default' and 'gke-task-workload-identity'"`

	// Configuration for GKE task workload identity token source factory
	GkeTaskWorkloadIdentityTokenSourceFactoryConfig GkeTaskWorkloadIdentityTokenSourceFactoryConfig `json:"gke-task-workload-identity" pflag:"Extra configuration for GKE task workload identity token source factory"`
}

func GetDefaultConfig

func GetDefaultConfig() TokenSourceFactoryConfig

type TokenSourceFactoryType

type TokenSourceFactoryType = string