authenticator

Documentation

Index

• func IsValidServiceAccountKeyFile(file string) bool
• type AuthenticatorConfig
  • func (config AuthenticatorConfig) New() (authenticator.Request, error)

Functions

func IsValidServiceAccountKeyFile

func IsValidServiceAccountKeyFile(file string) bool

IsValidServiceAccountKeyFile returns true if a valid public RSA key can be read from the given file

Types

type AuthenticatorConfig

type AuthenticatorConfig struct {
	BasicAuthFile               string
	ClientCAFile                string
	ServiceAccountKeyFiles      []string
	ServiceAccountLookup        bool
	ServiceAccountIssuer        string
	ServiceAccountAPIAudiences  []string
	WebhookTokenAuthnConfigFile string
	WebhookTokenAuthnCacheTTL   time.Duration

	TokenSuccessCacheTTL time.Duration
	TokenFailureCacheTTL time.Duration

	RequestHeaderConfig *authenticatorfactory.RequestHeaderConfig

	// TODO, this is the only non-serializable part of the entire config.  Factor it out into a clientconfig
	ServiceAccountTokenGetter serviceaccount.ServiceAccountTokenGetter
}

func (AuthenticatorConfig) New

func (config AuthenticatorConfig) New() (authenticator.Request, error)

New returns an authenticator.Request or an error that supports the standard Kubernetes authentication mechanisms.