bindmanager

Documentation

Index

• Constants
• func SidLabel(name, namespace string) string
• type BindManager
  • func New(p iamrole.Interface, oidcArn string) *BindManager
  • func (b *BindManager) Bind(ctx context.Context, binding *Binding) error
• type Binding
• type Manager

Constants

const (
	EffectAllow                     = "Allow"
	ActionAssumeRoleWithWebIdentity = "sts:AssumeRoleWithWebIdentity"
	SidLabelFormat                  = "Allow Service Account %s %s"
	SubjectFormat                   = "system:serviceaccount:%s:%s"
)

Functions

func SidLabel

func SidLabel(name, namespace string) string

Types

type BindManager

type BindManager struct {
	iamrole.Interface
	// contains filtered or unexported fields
}

func New

func New(p iamrole.Interface, oidcArn string) *BindManager

New returns a new BindManager instance

func (*BindManager) Bind

func (b *BindManager) Bind(ctx context.Context, binding *Binding) error

Bind will establish a trust relationship between a role and a service account by allowing the service account to AssumeRoleWithWebIdentity

type Binding

type Binding struct {
	Role            *v1alpha1.IamRole
	ServiceAccounts []corev1.ObjectReference
}

type Manager

type Manager interface {
	Bind(ctx context.Context, binding *Binding) error
}