token

Documentation

Index

• Constants
• func RetrieveValidatedClusterInfo(discoveryToken string, tokenAPIServers, rootCAPubKeys []string) (*clientcmdapi.Cluster, error)

Constants

const BootstrapUser = "token-bootstrap-client"

BootstrapUser defines bootstrap user name

Functions

func RetrieveValidatedClusterInfo

func RetrieveValidatedClusterInfo(discoveryToken string, tokenAPIServers, rootCAPubKeys []string) (*clientcmdapi.Cluster, error)

RetrieveValidatedClusterInfo connects to the API Server and tries to fetch the cluster-info ConfigMap It then makes sure it can trust the API Server by looking at the JWS-signed tokens and (if rootCAPubKeys is not empty) validating the cluster CA against a set of pinned public keys