forge

Documentation

Overview

Package forge contains utility functions to forge resources of the authentication module.

Index

• func ControlPlaneIdentityName(remoteClusterID liqov1beta1.ClusterID) string
• func Identity(name, namespace string) *authv1beta1.Identity
• func IdentityForRemoteCluster(name, namespace string, localClusterID liqov1beta1.ClusterID, ...) *authv1beta1.Identity
• func KubeconfigSecret(identity *authv1beta1.Identity) *corev1.Secret
• func MutateIdentity(identity *authv1beta1.Identity, remoteClusterID liqov1beta1.ClusterID, ...)
• func MutateKubeconfigSecret(secret *corev1.Secret, identity *authv1beta1.Identity, clientKey []byte, ...) error
• func MutateNonce(nonce *corev1.Secret, remoteClusterID liqov1beta1.ClusterID) error
• func MutateResourceSlice(resourceSlice *authv1beta1.ResourceSlice, ...) error
• func MutateTenant(tenant *authv1beta1.Tenant, remoteClusterID liqov1beta1.ClusterID, ...)
• func Nonce(tenantNamespace string) *corev1.Secret
• func ResourceSlice(name, namespace string) *authv1beta1.ResourceSlice
• func ResourceSliceIdentityName(resourceSlice *authv1beta1.ResourceSlice) string
• func SignedNonce(remoteClusterID liqov1beta1.ClusterID, tenantNamespace, nonce string) *corev1.Secret
• func Tenant(remoteClusterID liqov1beta1.ClusterID) *authv1beta1.Tenant
• func TenantForRemoteCluster(localClusterID liqov1beta1.ClusterID, publicKey, csr, signature []byte, ...) *authv1beta1.Tenant
• type ResourceSliceOptions

Functions

func ControlPlaneIdentityName

func ControlPlaneIdentityName(remoteClusterID liqov1beta1.ClusterID) string

ControlPlaneIdentityName forges the name of a ControlPlane Identity resource given the remote cluster name.

func Identity

func Identity(name, namespace string) *authv1beta1.Identity

Identity forges a Identity resource.

func IdentityForRemoteCluster

func IdentityForRemoteCluster(name, namespace string, localClusterID liqov1beta1.ClusterID,
	identityType authv1beta1.IdentityType, authParams *authv1beta1.AuthParams, defaultKubeConfigNs *string) *authv1beta1.Identity

IdentityForRemoteCluster forges a Identity resource to be applied on a remote cluster.

func KubeconfigSecret

func KubeconfigSecret(identity *authv1beta1.Identity) *corev1.Secret

KubeconfigSecret forges a new Secret object stroing the kubeconfig associated to the provided identity.

func MutateIdentity

func MutateIdentity(identity *authv1beta1.Identity, remoteClusterID liqov1beta1.ClusterID,
	identityType authv1beta1.IdentityType, authParams *authv1beta1.AuthParams, defaultKubeConfigNs *string)

MutateIdentity mutates a Identity resource.

func MutateKubeconfigSecret

func MutateKubeconfigSecret(secret *corev1.Secret, identity *authv1beta1.Identity, clientKey []byte, namespace *string) error

MutateKubeconfigSecret mutate a Secret object storing the kubeconfig associated to the provided identity.

func MutateNonce

func MutateNonce(nonce *corev1.Secret, remoteClusterID liqov1beta1.ClusterID) error

MutateNonce sets the nonce labels and data.

func MutateResourceSlice

func MutateResourceSlice(resourceSlice *authv1beta1.ResourceSlice, remoteClusterID liqov1beta1.ClusterID,
	opts *ResourceSliceOptions, createVirtualNode bool) error

MutateResourceSlice mutates a ResourceSlice resource.

func MutateTenant

func MutateTenant(tenant *authv1beta1.Tenant, remoteClusterID liqov1beta1.ClusterID,
	publicKey, csr, signature []byte, proxyURL *string)

MutateTenant mutates a Tenant resource.

func Nonce

func Nonce(tenantNamespace string) *corev1.Secret

Nonce creates a new Secret object to store the nonce.

func ResourceSlice

func ResourceSlice(name, namespace string) *authv1beta1.ResourceSlice

ResourceSlice forges a ResourceSlice resource.

func ResourceSliceIdentityName

func ResourceSliceIdentityName(resourceSlice *authv1beta1.ResourceSlice) string

ResourceSliceIdentityName forges the name of a ResourceSlice Identity.

func SignedNonce

func SignedNonce(remoteClusterID liqov1beta1.ClusterID, tenantNamespace, nonce string) *corev1.Secret

SignedNonce creates a new Secret object to store the nonce signed by the consumer cluster.

func Tenant

func Tenant(remoteClusterID liqov1beta1.ClusterID) *authv1beta1.Tenant

Tenant forges a Tenant resource.

func TenantForRemoteCluster

func TenantForRemoteCluster(localClusterID liqov1beta1.ClusterID,
	publicKey, csr, signature []byte, proxyURL *string) *authv1beta1.Tenant

TenantForRemoteCluster forges a Tenant resource to be applied on a remote cluster.

Types

type ResourceSliceOptions

type ResourceSliceOptions struct {
	Class     authv1beta1.ResourceSliceClass
	Resources map[corev1.ResourceName]string
}

ResourceSliceOptions contains the options to forge a ResourceSlice resource.