authentication

Documentation

Index

• type Authentication
  • func NewAuthentication() *Authentication
  • func (c *Authentication) AddFlags(fs *pflag.FlagSet)
  • func (c *Authentication) ApplyTo(authenticationInfo *genericapiserver.AuthenticationInfo, ...) error
  • func (c *Authentication) Validate() []error
• type GroupFilter
  • func (a *GroupFilter) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error)

Types

type Authentication

type Authentication struct {
	ClientCert apiserveroptions.ClientCertAuthenticationOptions

	PassOnGroups []string
	DropGroups   []string
}

Authentication wraps ClientCertAuthenticationOptions so we don't pull in more auth machinery than we need with DelegatingAuthenticationOptions

func NewAuthentication

func NewAuthentication() *Authentication

NewAuthentication creates a default Authentication

func (*Authentication) AddFlags

func (c *Authentication) AddFlags(fs *pflag.FlagSet)

AddFlags delegates to ClientCertAuthenticationOptions

func (*Authentication) ApplyTo

func (c *Authentication) ApplyTo(authenticationInfo *genericapiserver.AuthenticationInfo, servingInfo *genericapiserver.SecureServingInfo) error

ApplyTo sets up the x509 Authenticator if the client-ca-file option was passed

func (*Authentication) Validate

func (c *Authentication) Validate() []error

Validate just completes the options pattern. Returns nil.

type GroupFilter

type GroupFilter struct {
	Authenticator authenticator.Request

	PassOnGroups sets.String
	DropGroups   sets.String

	PassOnGroupPrefixes []string
	DropGroupPrefixes   []string
}

GroupFilter is a filter that filters out group that are not in the allowed groups, and groups that are in the disallowed groups.

func (*GroupFilter) AuthenticateRequest

func (a *GroupFilter) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error)