authenticator

Documentation

Index

• func IsValidServiceAccountKeyFile(file string) bool
• func New(config AuthenticatorConfig) (authenticator.Request, *spec.SecurityDefinitions, error)
• func NewAuthenticatorFromTokens(tokens map[string]*user.DefaultInfo) authenticator.Request
• type AuthenticatorConfig

Functions

func IsValidServiceAccountKeyFile

func IsValidServiceAccountKeyFile(file string) bool

IsValidServiceAccountKeyFile returns true if a valid public RSA key can be read from the given file

func New

func New(config AuthenticatorConfig) (authenticator.Request, *spec.SecurityDefinitions, error)

New returns an authenticator.Request or an error that supports the standard Kubernetes authentication mechanisms.

func NewAuthenticatorFromTokens

func NewAuthenticatorFromTokens(tokens map[string]*user.DefaultInfo) authenticator.Request

newAuthenticatorFromToken returns an authenticator.Request or an error

Types

type AuthenticatorConfig

type AuthenticatorConfig struct {
	Anonymous                   bool
	AnyToken                    bool
	BasicAuthFile               string
	ClientCAFile                string
	TokenAuthFile               string
	OIDCIssuerURL               string
	OIDCClientID                string
	OIDCCAFile                  string
	OIDCUsernameClaim           string
	OIDCGroupsClaim             string
	ServiceAccountKeyFiles      []string
	ServiceAccountLookup        bool
	ServiceAccountTokenGetter   serviceaccount.ServiceAccountTokenGetter
	KeystoneURL                 string
	WebhookTokenAuthnConfigFile string
	WebhookTokenAuthnCacheTTL   time.Duration
}