v1alpha1

package
v1.110.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Dec 11, 2024 License: Apache-2.0 Imports: 15 Imported by: 1

Documentation

Overview

Package v1alpha1 is a version of the API. +groupName=settings.gardener.cloud

Index

Constants

View Source 
const (
	// DefaultUsernameClaim is the default username claim.
	DefaultUsernameClaim = "sub"
	// DefaultSignAlg is the default signing algorithm.
	DefaultSignAlg = "RS256"
)
View Source 
const GroupName = "settings.gardener.cloud"

GroupName is the name of the settings API group.

Variables

View Source 
var (
	ErrInvalidLengthGenerated        = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated          = fmt.Errorf("proto: integer overflow")
	ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
View Source 
var (
	// SchemeBuilder is a new Scheme Builder which registers our API.
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes, addDefaultingFuncs)

	// AddToScheme is a reference to the Scheme Builder's AddToScheme function.
	AddToScheme = SchemeBuilder.AddToScheme
)
View Source 
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Convert_settings_ClusterOpenIDConnectPresetList_To_v1alpha1_ClusterOpenIDConnectPresetList 

func Convert_settings_ClusterOpenIDConnectPresetList_To_v1alpha1_ClusterOpenIDConnectPresetList(in *settings.ClusterOpenIDConnectPresetList, out *ClusterOpenIDConnectPresetList, s conversion.Scope) error

Convert_settings_ClusterOpenIDConnectPresetList_To_v1alpha1_ClusterOpenIDConnectPresetList is an autogenerated conversion function.

func Convert_settings_ClusterOpenIDConnectPresetSpec_To_v1alpha1_ClusterOpenIDConnectPresetSpec 

func Convert_settings_ClusterOpenIDConnectPresetSpec_To_v1alpha1_ClusterOpenIDConnectPresetSpec(in *settings.ClusterOpenIDConnectPresetSpec, out *ClusterOpenIDConnectPresetSpec, s conversion.Scope) error

Convert_settings_ClusterOpenIDConnectPresetSpec_To_v1alpha1_ClusterOpenIDConnectPresetSpec is an autogenerated conversion function.

func Convert_settings_ClusterOpenIDConnectPreset_To_v1alpha1_ClusterOpenIDConnectPreset 

func Convert_settings_ClusterOpenIDConnectPreset_To_v1alpha1_ClusterOpenIDConnectPreset(in *settings.ClusterOpenIDConnectPreset, out *ClusterOpenIDConnectPreset, s conversion.Scope) error

Convert_settings_ClusterOpenIDConnectPreset_To_v1alpha1_ClusterOpenIDConnectPreset is an autogenerated conversion function.

func Convert_settings_KubeAPIServerOpenIDConnect_To_v1alpha1_KubeAPIServerOpenIDConnect 

func Convert_settings_KubeAPIServerOpenIDConnect_To_v1alpha1_KubeAPIServerOpenIDConnect(in *settings.KubeAPIServerOpenIDConnect, out *KubeAPIServerOpenIDConnect, s conversion.Scope) error

Convert_settings_KubeAPIServerOpenIDConnect_To_v1alpha1_KubeAPIServerOpenIDConnect is an autogenerated conversion function.

func Convert_settings_OpenIDConnectClientAuthentication_To_v1alpha1_OpenIDConnectClientAuthentication 

func Convert_settings_OpenIDConnectClientAuthentication_To_v1alpha1_OpenIDConnectClientAuthentication(in *settings.OpenIDConnectClientAuthentication, out *OpenIDConnectClientAuthentication, s conversion.Scope) error

Convert_settings_OpenIDConnectClientAuthentication_To_v1alpha1_OpenIDConnectClientAuthentication is an autogenerated conversion function.

func Convert_settings_OpenIDConnectPresetList_To_v1alpha1_OpenIDConnectPresetList 

func Convert_settings_OpenIDConnectPresetList_To_v1alpha1_OpenIDConnectPresetList(in *settings.OpenIDConnectPresetList, out *OpenIDConnectPresetList, s conversion.Scope) error

Convert_settings_OpenIDConnectPresetList_To_v1alpha1_OpenIDConnectPresetList is an autogenerated conversion function.

func Convert_settings_OpenIDConnectPresetSpec_To_v1alpha1_OpenIDConnectPresetSpec 

func Convert_settings_OpenIDConnectPresetSpec_To_v1alpha1_OpenIDConnectPresetSpec(in *settings.OpenIDConnectPresetSpec, out *OpenIDConnectPresetSpec, s conversion.Scope) error

Convert_settings_OpenIDConnectPresetSpec_To_v1alpha1_OpenIDConnectPresetSpec is an autogenerated conversion function.

func Convert_settings_OpenIDConnectPreset_To_v1alpha1_OpenIDConnectPreset 

func Convert_settings_OpenIDConnectPreset_To_v1alpha1_OpenIDConnectPreset(in *settings.OpenIDConnectPreset, out *OpenIDConnectPreset, s conversion.Scope) error

Convert_settings_OpenIDConnectPreset_To_v1alpha1_OpenIDConnectPreset is an autogenerated conversion function.

func Convert_v1alpha1_ClusterOpenIDConnectPresetList_To_settings_ClusterOpenIDConnectPresetList 

func Convert_v1alpha1_ClusterOpenIDConnectPresetList_To_settings_ClusterOpenIDConnectPresetList(in *ClusterOpenIDConnectPresetList, out *settings.ClusterOpenIDConnectPresetList, s conversion.Scope) error

Convert_v1alpha1_ClusterOpenIDConnectPresetList_To_settings_ClusterOpenIDConnectPresetList is an autogenerated conversion function.

func Convert_v1alpha1_ClusterOpenIDConnectPresetSpec_To_settings_ClusterOpenIDConnectPresetSpec 

func Convert_v1alpha1_ClusterOpenIDConnectPresetSpec_To_settings_ClusterOpenIDConnectPresetSpec(in *ClusterOpenIDConnectPresetSpec, out *settings.ClusterOpenIDConnectPresetSpec, s conversion.Scope) error

Convert_v1alpha1_ClusterOpenIDConnectPresetSpec_To_settings_ClusterOpenIDConnectPresetSpec is an autogenerated conversion function.

func Convert_v1alpha1_ClusterOpenIDConnectPreset_To_settings_ClusterOpenIDConnectPreset 

func Convert_v1alpha1_ClusterOpenIDConnectPreset_To_settings_ClusterOpenIDConnectPreset(in *ClusterOpenIDConnectPreset, out *settings.ClusterOpenIDConnectPreset, s conversion.Scope) error

Convert_v1alpha1_ClusterOpenIDConnectPreset_To_settings_ClusterOpenIDConnectPreset is an autogenerated conversion function.

func Convert_v1alpha1_KubeAPIServerOpenIDConnect_To_settings_KubeAPIServerOpenIDConnect 

func Convert_v1alpha1_KubeAPIServerOpenIDConnect_To_settings_KubeAPIServerOpenIDConnect(in *KubeAPIServerOpenIDConnect, out *settings.KubeAPIServerOpenIDConnect, s conversion.Scope) error

Convert_v1alpha1_KubeAPIServerOpenIDConnect_To_settings_KubeAPIServerOpenIDConnect is an autogenerated conversion function.

func Convert_v1alpha1_OpenIDConnectClientAuthentication_To_settings_OpenIDConnectClientAuthentication 

func Convert_v1alpha1_OpenIDConnectClientAuthentication_To_settings_OpenIDConnectClientAuthentication(in *OpenIDConnectClientAuthentication, out *settings.OpenIDConnectClientAuthentication, s conversion.Scope) error

Convert_v1alpha1_OpenIDConnectClientAuthentication_To_settings_OpenIDConnectClientAuthentication is an autogenerated conversion function.

func Convert_v1alpha1_OpenIDConnectPresetList_To_settings_OpenIDConnectPresetList 

func Convert_v1alpha1_OpenIDConnectPresetList_To_settings_OpenIDConnectPresetList(in *OpenIDConnectPresetList, out *settings.OpenIDConnectPresetList, s conversion.Scope) error

Convert_v1alpha1_OpenIDConnectPresetList_To_settings_OpenIDConnectPresetList is an autogenerated conversion function.

func Convert_v1alpha1_OpenIDConnectPresetSpec_To_settings_OpenIDConnectPresetSpec 

func Convert_v1alpha1_OpenIDConnectPresetSpec_To_settings_OpenIDConnectPresetSpec(in *OpenIDConnectPresetSpec, out *settings.OpenIDConnectPresetSpec, s conversion.Scope) error

Convert_v1alpha1_OpenIDConnectPresetSpec_To_settings_OpenIDConnectPresetSpec is an autogenerated conversion function.

func Convert_v1alpha1_OpenIDConnectPreset_To_settings_OpenIDConnectPreset 

func Convert_v1alpha1_OpenIDConnectPreset_To_settings_OpenIDConnectPreset(in *OpenIDConnectPreset, out *settings.OpenIDConnectPreset, s conversion.Scope) error

Convert_v1alpha1_OpenIDConnectPreset_To_settings_OpenIDConnectPreset is an autogenerated conversion function.

func Kind 

func Kind(kind string) schema.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind.

func RegisterConversions 

func RegisterConversions(s *runtime.Scheme) error

RegisterConversions adds conversion functions to the given scheme. Public to allow building arbitrary schemes.

func RegisterDefaults 

func RegisterDefaults(scheme *runtime.Scheme) error

RegisterDefaults adds defaulters functions to the given scheme. Public to allow building arbitrary schemes. All generated defaulters are covering - they call all nested defaulters.

func Resource 

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource.

func SetDefaults_ClusterOpenIDConnectPresetSpec added in v1.87.0 

func SetDefaults_ClusterOpenIDConnectPresetSpec(obj *ClusterOpenIDConnectPresetSpec)

SetDefaults_ClusterOpenIDConnectPresetSpec sets default values for ClusterOpenIDConnectPreset objects.

func SetDefaults_KubeAPIServerOpenIDConnect added in v1.87.0 

func SetDefaults_KubeAPIServerOpenIDConnect(obj *KubeAPIServerOpenIDConnect)

SetDefaults_KubeAPIServerOpenIDConnect sets default values for KubeAPIServerOpenIDConnect objects.

func SetDefaults_OpenIDConnectPresetSpec added in v1.87.0 

func SetDefaults_OpenIDConnectPresetSpec(obj *OpenIDConnectPresetSpec)

SetDefaults_OpenIDConnectPresetSpec sets default values for OpenIDConnectPresetSpec objects.

func SetObjectDefaults_ClusterOpenIDConnectPreset 

func SetObjectDefaults_ClusterOpenIDConnectPreset(in *ClusterOpenIDConnectPreset)

func SetObjectDefaults_ClusterOpenIDConnectPresetList 

func SetObjectDefaults_ClusterOpenIDConnectPresetList(in *ClusterOpenIDConnectPresetList)

func SetObjectDefaults_OpenIDConnectPreset 

func SetObjectDefaults_OpenIDConnectPreset(in *OpenIDConnectPreset)

func SetObjectDefaults_OpenIDConnectPresetList 

func SetObjectDefaults_OpenIDConnectPresetList(in *OpenIDConnectPresetList)

Types

type ClusterOpenIDConnectPreset 

type ClusterOpenIDConnectPreset struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
	// Spec is the specification of this OpenIDConnect preset.
	Spec ClusterOpenIDConnectPresetSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
}

ClusterOpenIDConnectPreset is a OpenID Connect configuration that is applied to a Shoot objects cluster-wide.

func (*ClusterOpenIDConnectPreset) DeepCopy 

func (in *ClusterOpenIDConnectPreset) DeepCopy() *ClusterOpenIDConnectPreset

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterOpenIDConnectPreset.

func (*ClusterOpenIDConnectPreset) DeepCopyInto 

func (in *ClusterOpenIDConnectPreset) DeepCopyInto(out *ClusterOpenIDConnectPreset)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterOpenIDConnectPreset) DeepCopyObject 

func (in *ClusterOpenIDConnectPreset) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterOpenIDConnectPreset) Descriptor added in v1.3.0 

func (*ClusterOpenIDConnectPreset) Descriptor() ([]byte, []int)

func (*ClusterOpenIDConnectPreset) Marshal added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) Marshal() (dAtA []byte, err error)

func (*ClusterOpenIDConnectPreset) MarshalTo added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) MarshalTo(dAtA []byte) (int, error)

func (*ClusterOpenIDConnectPreset) MarshalToSizedBuffer added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterOpenIDConnectPreset) ProtoMessage added in v1.3.0 

func (*ClusterOpenIDConnectPreset) ProtoMessage()

func (*ClusterOpenIDConnectPreset) Reset added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) Reset()

func (*ClusterOpenIDConnectPreset) Size added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) Size() (n int)

func (*ClusterOpenIDConnectPreset) String added in v1.3.0 

func (this *ClusterOpenIDConnectPreset) String() string

func (*ClusterOpenIDConnectPreset) Unmarshal added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) Unmarshal(dAtA []byte) error

func (*ClusterOpenIDConnectPreset) XXX_DiscardUnknown added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) XXX_DiscardUnknown()

func (*ClusterOpenIDConnectPreset) XXX_Marshal added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterOpenIDConnectPreset) XXX_Merge added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) XXX_Merge(src proto.Message)

func (*ClusterOpenIDConnectPreset) XXX_Size added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) XXX_Size() int

func (*ClusterOpenIDConnectPreset) XXX_Unmarshal added in v1.3.0 

func (m *ClusterOpenIDConnectPreset) XXX_Unmarshal(b []byte) error

type ClusterOpenIDConnectPresetList 

type ClusterOpenIDConnectPresetList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard list object metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
	// Items is the list of ClusterOpenIDConnectPresets.
	Items []ClusterOpenIDConnectPreset `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterOpenIDConnectPresetList is a collection of ClusterOpenIDConnectPresets.

func (*ClusterOpenIDConnectPresetList) DeepCopy 

func (in *ClusterOpenIDConnectPresetList) DeepCopy() *ClusterOpenIDConnectPresetList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterOpenIDConnectPresetList.

func (*ClusterOpenIDConnectPresetList) DeepCopyInto 

func (in *ClusterOpenIDConnectPresetList) DeepCopyInto(out *ClusterOpenIDConnectPresetList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterOpenIDConnectPresetList) DeepCopyObject 

func (in *ClusterOpenIDConnectPresetList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterOpenIDConnectPresetList) Descriptor added in v1.3.0 

func (*ClusterOpenIDConnectPresetList) Descriptor() ([]byte, []int)

func (*ClusterOpenIDConnectPresetList) Marshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) Marshal() (dAtA []byte, err error)

func (*ClusterOpenIDConnectPresetList) MarshalTo added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterOpenIDConnectPresetList) MarshalToSizedBuffer added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterOpenIDConnectPresetList) ProtoMessage added in v1.3.0 

func (*ClusterOpenIDConnectPresetList) ProtoMessage()

func (*ClusterOpenIDConnectPresetList) Reset added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) Reset()

func (*ClusterOpenIDConnectPresetList) Size added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) Size() (n int)

func (*ClusterOpenIDConnectPresetList) String added in v1.3.0 

func (this *ClusterOpenIDConnectPresetList) String() string

func (*ClusterOpenIDConnectPresetList) Unmarshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) Unmarshal(dAtA []byte) error

func (*ClusterOpenIDConnectPresetList) XXX_DiscardUnknown added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) XXX_DiscardUnknown()

func (*ClusterOpenIDConnectPresetList) XXX_Marshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterOpenIDConnectPresetList) XXX_Merge added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) XXX_Merge(src proto.Message)

func (*ClusterOpenIDConnectPresetList) XXX_Size added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) XXX_Size() int

func (*ClusterOpenIDConnectPresetList) XXX_Unmarshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetList) XXX_Unmarshal(b []byte) error

type ClusterOpenIDConnectPresetSpec 

type ClusterOpenIDConnectPresetSpec struct {
	OpenIDConnectPresetSpec `json:",inline" protobuf:"bytes,1,opt,name=openIDConnectPresetSpec"`

	// Project decides whether to apply the configuration if the
	// Shoot is in a specific Project matching the label selector.
	// Use the selector only if the OIDC Preset is opt-in, because end
	// users may skip the admission by setting the labels.
	// Defaults to the empty LabelSelector, which matches everything.
	// +optional
	ProjectSelector *metav1.LabelSelector `json:"projectSelector,omitempty" protobuf:"bytes,2,opt,name=projectSelector"`
}

ClusterOpenIDConnectPresetSpec contains the OpenIDConnect specification and project selector matching Shoots in Projects.

func (*ClusterOpenIDConnectPresetSpec) DeepCopy 

func (in *ClusterOpenIDConnectPresetSpec) DeepCopy() *ClusterOpenIDConnectPresetSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterOpenIDConnectPresetSpec.

func (*ClusterOpenIDConnectPresetSpec) DeepCopyInto 

func (in *ClusterOpenIDConnectPresetSpec) DeepCopyInto(out *ClusterOpenIDConnectPresetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterOpenIDConnectPresetSpec) Descriptor added in v1.3.0 

func (*ClusterOpenIDConnectPresetSpec) Descriptor() ([]byte, []int)

func (*ClusterOpenIDConnectPresetSpec) Marshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) Marshal() (dAtA []byte, err error)

func (*ClusterOpenIDConnectPresetSpec) MarshalTo added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) MarshalTo(dAtA []byte) (int, error)

func (*ClusterOpenIDConnectPresetSpec) MarshalToSizedBuffer added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterOpenIDConnectPresetSpec) ProtoMessage added in v1.3.0 

func (*ClusterOpenIDConnectPresetSpec) ProtoMessage()

func (*ClusterOpenIDConnectPresetSpec) Reset added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) Reset()

func (*ClusterOpenIDConnectPresetSpec) Size added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) Size() (n int)

func (*ClusterOpenIDConnectPresetSpec) String added in v1.3.0 

func (this *ClusterOpenIDConnectPresetSpec) String() string

func (*ClusterOpenIDConnectPresetSpec) Unmarshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) Unmarshal(dAtA []byte) error

func (*ClusterOpenIDConnectPresetSpec) XXX_DiscardUnknown added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) XXX_DiscardUnknown()

func (*ClusterOpenIDConnectPresetSpec) XXX_Marshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterOpenIDConnectPresetSpec) XXX_Merge added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) XXX_Merge(src proto.Message)

func (*ClusterOpenIDConnectPresetSpec) XXX_Size added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) XXX_Size() int

func (*ClusterOpenIDConnectPresetSpec) XXX_Unmarshal added in v1.3.0 

func (m *ClusterOpenIDConnectPresetSpec) XXX_Unmarshal(b []byte) error

type KubeAPIServerOpenIDConnect 

type KubeAPIServerOpenIDConnect struct {
	// If set, the OpenID server's certificate will be verified by one of the authorities in the oidc-ca-file, otherwise the host's root CA set will be used.
	// +optional
	CABundle *string `json:"caBundle,omitempty" protobuf:"bytes,1,opt,name=caBundle"`
	// The client ID for the OpenID Connect client.
	// Required.
	ClientID string `json:"clientID" protobuf:"bytes,2,opt,name=clientID"`
	// If provided, the name of a custom OpenID Connect claim for specifying user groups. The claim value is expected to be a string or array of strings. This field is experimental, please see the authentication documentation for further details.
	// +optional
	GroupsClaim *string `json:"groupsClaim,omitempty" protobuf:"bytes,3,opt,name=groupsClaim"`
	// If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies.
	// +optional
	GroupsPrefix *string `json:"groupsPrefix,omitempty" protobuf:"bytes,4,opt,name=groupsPrefix"`
	// The URL of the OpenID issuer, only HTTPS scheme will be accepted. If set, it will be used to verify the OIDC JSON Web Token (JWT).
	// Required.
	IssuerURL string `json:"issuerURL" protobuf:"bytes,5,opt,name=issuerURL"`
	// key=value pairs that describes a required claim in the ID Token. If set, the claim is verified to be present in the ID Token with a matching value.
	// +optional
	RequiredClaims map[string]string `json:"requiredClaims,omitempty" protobuf:"bytes,6,rep,name=requiredClaims"`
	// List of allowed JOSE asymmetric signing algorithms. JWTs with a 'alg' header value not in this list will be rejected. Values are defined by RFC 7518 https://tools.ietf.org/html/rfc7518#section-3.1
	// Defaults to [RS256]
	// +optional
	SigningAlgs []string `json:"signingAlgs,omitempty" protobuf:"bytes,7,rep,name=signingAlgs"`
	// The OpenID claim to use as the user name. Note that claims other than the default ('sub') is not guaranteed to be unique and immutable. This field is experimental, please see the authentication documentation for further details.
	// Defaults to "sub".
	// +optional
	UsernameClaim *string `json:"usernameClaim,omitempty" protobuf:"bytes,8,opt,name=usernameClaim"`
	// If provided, all usernames will be prefixed with this value. If not provided, username claims other than 'email' are prefixed by the issuer URL to avoid clashes. To skip any prefixing, provide the value '-'.
	// +optional
	UsernamePrefix *string `json:"usernamePrefix,omitempty" protobuf:"bytes,9,opt,name=usernamePrefix"`
}

KubeAPIServerOpenIDConnect contains configuration settings for the OIDC provider. Note: Descriptions were taken from the Kubernetes documentation.

func (*KubeAPIServerOpenIDConnect) DeepCopy 

func (in *KubeAPIServerOpenIDConnect) DeepCopy() *KubeAPIServerOpenIDConnect

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeAPIServerOpenIDConnect.

func (*KubeAPIServerOpenIDConnect) DeepCopyInto 

func (in *KubeAPIServerOpenIDConnect) DeepCopyInto(out *KubeAPIServerOpenIDConnect)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*KubeAPIServerOpenIDConnect) Descriptor added in v1.3.0 

func (*KubeAPIServerOpenIDConnect) Descriptor() ([]byte, []int)

func (*KubeAPIServerOpenIDConnect) Marshal added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) Marshal() (dAtA []byte, err error)

func (*KubeAPIServerOpenIDConnect) MarshalTo added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) MarshalTo(dAtA []byte) (int, error)

func (*KubeAPIServerOpenIDConnect) MarshalToSizedBuffer added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*KubeAPIServerOpenIDConnect) ProtoMessage added in v1.3.0 

func (*KubeAPIServerOpenIDConnect) ProtoMessage()

func (*KubeAPIServerOpenIDConnect) Reset added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) Reset()

func (*KubeAPIServerOpenIDConnect) Size added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) Size() (n int)

func (*KubeAPIServerOpenIDConnect) String added in v1.3.0 

func (this *KubeAPIServerOpenIDConnect) String() string

func (*KubeAPIServerOpenIDConnect) Unmarshal added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) Unmarshal(dAtA []byte) error

func (*KubeAPIServerOpenIDConnect) XXX_DiscardUnknown added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) XXX_DiscardUnknown()

func (*KubeAPIServerOpenIDConnect) XXX_Marshal added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*KubeAPIServerOpenIDConnect) XXX_Merge added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) XXX_Merge(src proto.Message)

func (*KubeAPIServerOpenIDConnect) XXX_Size added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) XXX_Size() int

func (*KubeAPIServerOpenIDConnect) XXX_Unmarshal added in v1.3.0 

func (m *KubeAPIServerOpenIDConnect) XXX_Unmarshal(b []byte) error

type OpenIDConnectClientAuthentication 

type OpenIDConnectClientAuthentication struct {
	// The client Secret for the OpenID Connect client.
	// +optional
	Secret *string `json:"secret,omitempty" protobuf:"bytes,1,opt,name=secret"`

	// Extra configuration added to kubeconfig's auth-provider.
	// Must not be any of idp-issuer-url, client-id, client-secret, idp-certificate-authority, idp-certificate-authority-data, id-token or refresh-token
	// +optional
	ExtraConfig map[string]string `json:"extraConfig,omitempty" protobuf:"bytes,2,rep,name=extraConfig"`
}

OpenIDConnectClientAuthentication contains configuration for OIDC clients.

func (*OpenIDConnectClientAuthentication) DeepCopy 

func (in *OpenIDConnectClientAuthentication) DeepCopy() *OpenIDConnectClientAuthentication

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenIDConnectClientAuthentication.

func (*OpenIDConnectClientAuthentication) DeepCopyInto 

func (in *OpenIDConnectClientAuthentication) DeepCopyInto(out *OpenIDConnectClientAuthentication)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OpenIDConnectClientAuthentication) Descriptor added in v1.3.0 

func (*OpenIDConnectClientAuthentication) Descriptor() ([]byte, []int)

func (*OpenIDConnectClientAuthentication) Marshal added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) Marshal() (dAtA []byte, err error)

func (*OpenIDConnectClientAuthentication) MarshalTo added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) MarshalTo(dAtA []byte) (int, error)

func (*OpenIDConnectClientAuthentication) MarshalToSizedBuffer added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*OpenIDConnectClientAuthentication) ProtoMessage added in v1.3.0 

func (*OpenIDConnectClientAuthentication) ProtoMessage()

func (*OpenIDConnectClientAuthentication) Reset added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) Reset()

func (*OpenIDConnectClientAuthentication) Size added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) Size() (n int)

func (*OpenIDConnectClientAuthentication) String added in v1.3.0 

func (this *OpenIDConnectClientAuthentication) String() string

func (*OpenIDConnectClientAuthentication) Unmarshal added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) Unmarshal(dAtA []byte) error

func (*OpenIDConnectClientAuthentication) XXX_DiscardUnknown added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) XXX_DiscardUnknown()

func (*OpenIDConnectClientAuthentication) XXX_Marshal added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*OpenIDConnectClientAuthentication) XXX_Merge added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) XXX_Merge(src proto.Message)

func (*OpenIDConnectClientAuthentication) XXX_Size added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) XXX_Size() int

func (*OpenIDConnectClientAuthentication) XXX_Unmarshal added in v1.3.0 

func (m *OpenIDConnectClientAuthentication) XXX_Unmarshal(b []byte) error

type OpenIDConnectPreset 

type OpenIDConnectPreset struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
	// Spec is the specification of this OpenIDConnect preset.
	Spec OpenIDConnectPresetSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
}

OpenIDConnectPreset is a OpenID Connect configuration that is applied to a Shoot in a namespace.

func (*OpenIDConnectPreset) DeepCopy 

func (in *OpenIDConnectPreset) DeepCopy() *OpenIDConnectPreset

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenIDConnectPreset.

func (*OpenIDConnectPreset) DeepCopyInto 

func (in *OpenIDConnectPreset) DeepCopyInto(out *OpenIDConnectPreset)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OpenIDConnectPreset) DeepCopyObject 

func (in *OpenIDConnectPreset) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*OpenIDConnectPreset) Descriptor added in v1.3.0 

func (*OpenIDConnectPreset) Descriptor() ([]byte, []int)

func (*OpenIDConnectPreset) Marshal added in v1.3.0 

func (m *OpenIDConnectPreset) Marshal() (dAtA []byte, err error)

func (*OpenIDConnectPreset) MarshalTo added in v1.3.0 

func (m *OpenIDConnectPreset) MarshalTo(dAtA []byte) (int, error)

func (*OpenIDConnectPreset) MarshalToSizedBuffer added in v1.3.0 

func (m *OpenIDConnectPreset) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*OpenIDConnectPreset) ProtoMessage added in v1.3.0 

func (*OpenIDConnectPreset) ProtoMessage()

func (*OpenIDConnectPreset) Reset added in v1.3.0 

func (m *OpenIDConnectPreset) Reset()

func (*OpenIDConnectPreset) Size added in v1.3.0 

func (m *OpenIDConnectPreset) Size() (n int)

func (*OpenIDConnectPreset) String added in v1.3.0 

func (this *OpenIDConnectPreset) String() string

func (*OpenIDConnectPreset) Unmarshal added in v1.3.0 

func (m *OpenIDConnectPreset) Unmarshal(dAtA []byte) error

func (*OpenIDConnectPreset) XXX_DiscardUnknown added in v1.3.0 

func (m *OpenIDConnectPreset) XXX_DiscardUnknown()

func (*OpenIDConnectPreset) XXX_Marshal added in v1.3.0 

func (m *OpenIDConnectPreset) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*OpenIDConnectPreset) XXX_Merge added in v1.3.0 

func (m *OpenIDConnectPreset) XXX_Merge(src proto.Message)

func (*OpenIDConnectPreset) XXX_Size added in v1.3.0 

func (m *OpenIDConnectPreset) XXX_Size() int

func (*OpenIDConnectPreset) XXX_Unmarshal added in v1.3.0 

func (m *OpenIDConnectPreset) XXX_Unmarshal(b []byte) error

type OpenIDConnectPresetList 

type OpenIDConnectPresetList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard list object metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
	// Items is the list of OpenIDConnectPresets.
	Items []OpenIDConnectPreset `json:"items" protobuf:"bytes,2,rep,name=items"`
}

OpenIDConnectPresetList is a collection of OpenIDConnectPresets.

func (*OpenIDConnectPresetList) DeepCopy 

func (in *OpenIDConnectPresetList) DeepCopy() *OpenIDConnectPresetList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenIDConnectPresetList.

func (*OpenIDConnectPresetList) DeepCopyInto 

func (in *OpenIDConnectPresetList) DeepCopyInto(out *OpenIDConnectPresetList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OpenIDConnectPresetList) DeepCopyObject 

func (in *OpenIDConnectPresetList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*OpenIDConnectPresetList) Descriptor added in v1.3.0 

func (*OpenIDConnectPresetList) Descriptor() ([]byte, []int)

func (*OpenIDConnectPresetList) Marshal added in v1.3.0 

func (m *OpenIDConnectPresetList) Marshal() (dAtA []byte, err error)

func (*OpenIDConnectPresetList) MarshalTo added in v1.3.0 

func (m *OpenIDConnectPresetList) MarshalTo(dAtA []byte) (int, error)

func (*OpenIDConnectPresetList) MarshalToSizedBuffer added in v1.3.0 

func (m *OpenIDConnectPresetList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*OpenIDConnectPresetList) ProtoMessage added in v1.3.0 

func (*OpenIDConnectPresetList) ProtoMessage()

func (*OpenIDConnectPresetList) Reset added in v1.3.0 

func (m *OpenIDConnectPresetList) Reset()

func (*OpenIDConnectPresetList) Size added in v1.3.0 

func (m *OpenIDConnectPresetList) Size() (n int)

func (*OpenIDConnectPresetList) String added in v1.3.0 

func (this *OpenIDConnectPresetList) String() string

func (*OpenIDConnectPresetList) Unmarshal added in v1.3.0 

func (m *OpenIDConnectPresetList) Unmarshal(dAtA []byte) error

func (*OpenIDConnectPresetList) XXX_DiscardUnknown added in v1.3.0 

func (m *OpenIDConnectPresetList) XXX_DiscardUnknown()

func (*OpenIDConnectPresetList) XXX_Marshal added in v1.3.0 

func (m *OpenIDConnectPresetList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*OpenIDConnectPresetList) XXX_Merge added in v1.3.0 

func (m *OpenIDConnectPresetList) XXX_Merge(src proto.Message)

func (*OpenIDConnectPresetList) XXX_Size added in v1.3.0 

func (m *OpenIDConnectPresetList) XXX_Size() int

func (*OpenIDConnectPresetList) XXX_Unmarshal added in v1.3.0 

func (m *OpenIDConnectPresetList) XXX_Unmarshal(b []byte) error

type OpenIDConnectPresetSpec 

type OpenIDConnectPresetSpec struct {

	// Server contains the kube-apiserver's OpenID Connect configuration.
	// This configuration is not overwriting any existing OpenID Connect
	// configuration already set on the Shoot object.
	Server KubeAPIServerOpenIDConnect `json:"server" protobuf:"bytes,1,opt,name=server"`

	// Client contains the configuration used for client OIDC authentication
	// of Shoot clusters.
	// This configuration is not overwriting any existing OpenID Connect
	// client authentication already set on the Shoot object.
	//
	// Deprecated: The OpenID Connect configuration this field specifies is not used and will be forbidden starting from Kubernetes 1.31.
	// It's use was planned for genereting OIDC kubeconfig https://github.com/gardener/gardener/issues/1433
	// TODO(AleksandarSavchev): Drop this field after support for Kubernetes 1.30 is dropped.
	// +optional
	Client *OpenIDConnectClientAuthentication `json:"client,omitempty" protobuf:"bytes,2,opt,name=client"`

	// ShootSelector decides whether to apply the configuration if the
	// Shoot has matching labels.
	// Use the selector only if the OIDC Preset is opt-in, because end
	// users may skip the admission by setting the labels.
	// Default to the empty LabelSelector, which matches everything.
	// +optional
	ShootSelector *metav1.LabelSelector `json:"shootSelector,omitempty" protobuf:"bytes,3,opt,name=shootSelector"`

	// Weight associated with matching the corresponding preset,
	// in the range 1-100.
	// Required.
	Weight int32 `json:"weight" protobuf:"varint,4,opt,name=weight"`
}

OpenIDConnectPresetSpec contains the Shoot selector for which a specific OpenID Connect configuration is applied.

func (*OpenIDConnectPresetSpec) DeepCopy 

func (in *OpenIDConnectPresetSpec) DeepCopy() *OpenIDConnectPresetSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OpenIDConnectPresetSpec.

func (*OpenIDConnectPresetSpec) DeepCopyInto 

func (in *OpenIDConnectPresetSpec) DeepCopyInto(out *OpenIDConnectPresetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*OpenIDConnectPresetSpec) Descriptor added in v1.3.0 

func (*OpenIDConnectPresetSpec) Descriptor() ([]byte, []int)

func (*OpenIDConnectPresetSpec) Marshal added in v1.3.0 

func (m *OpenIDConnectPresetSpec) Marshal() (dAtA []byte, err error)

func (*OpenIDConnectPresetSpec) MarshalTo added in v1.3.0 

func (m *OpenIDConnectPresetSpec) MarshalTo(dAtA []byte) (int, error)

func (*OpenIDConnectPresetSpec) MarshalToSizedBuffer added in v1.3.0 

func (m *OpenIDConnectPresetSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*OpenIDConnectPresetSpec) ProtoMessage added in v1.3.0 

func (*OpenIDConnectPresetSpec) ProtoMessage()

func (*OpenIDConnectPresetSpec) Reset added in v1.3.0 

func (m *OpenIDConnectPresetSpec) Reset()

func (*OpenIDConnectPresetSpec) Size added in v1.3.0 

func (m *OpenIDConnectPresetSpec) Size() (n int)

func (*OpenIDConnectPresetSpec) String added in v1.3.0 

func (this *OpenIDConnectPresetSpec) String() string

func (*OpenIDConnectPresetSpec) Unmarshal added in v1.3.0 

func (m *OpenIDConnectPresetSpec) Unmarshal(dAtA []byte) error

func (*OpenIDConnectPresetSpec) XXX_DiscardUnknown added in v1.3.0 

func (m *OpenIDConnectPresetSpec) XXX_DiscardUnknown()

func (*OpenIDConnectPresetSpec) XXX_Marshal added in v1.3.0 

func (m *OpenIDConnectPresetSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*OpenIDConnectPresetSpec) XXX_Merge added in v1.3.0 

func (m *OpenIDConnectPresetSpec) XXX_Merge(src proto.Message)

func (*OpenIDConnectPresetSpec) XXX_Size added in v1.3.0 

func (m *OpenIDConnectPresetSpec) XXX_Size() int

func (*OpenIDConnectPresetSpec) XXX_Unmarshal added in v1.3.0 

func (m *OpenIDConnectPresetSpec) XXX_Unmarshal(b []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.