webhook

Documentation

Index

• Constants
• type CredentialsInjector
  • func NewCredentialsInjector(client client.Client, decoder *admission.Decoder) *CredentialsInjector
  • func (w *CredentialsInjector) Handle(ctx context.Context, req admission.Request) admission.Response

Constants

const (
	EnvKeyGoogleApplicationCredentials = "GOOGLE_APPLICATION_CREDENTIALS" //#nosec G101

	AnnotationGCPServiceAccount      = "giantswarm.io/gcp-service-account"
	AnnotationWorkloadIdentityPoolID = "giantswarm.io/gcp-workload-identity-pool-id"
	AnnotationGCPIdentityProvider    = "giantswarm.io/gcp-identity-provider"

	LabelWorkloadIdentity = "giantswarm.io/gcp-workload-identity"

	VolumeWorkloadIdentityName        = "workload-identity-credentials"
	VolumeWorkloadIdentityDefaultMode = 420
	VolumeMountWorkloadIdentityPath   = "/var/run/secrets/workload-identity"

	TokenExpirationSeconds                = 7200
	ServiceAccountTokenPath               = "token"
	GoogleApplicationCredentialsJSONPath  = "google-application-credentials.json"
	SecretKeyGoogleApplicationCredentials = "config"
)

Types

type CredentialsInjector

type CredentialsInjector struct {
	// contains filtered or unexported fields
}

func NewCredentialsInjector

func NewCredentialsInjector(client client.Client, decoder *admission.Decoder) *CredentialsInjector

func (*CredentialsInjector) Handle

func (w *CredentialsInjector) Handle(ctx context.Context, req admission.Request) admission.Response