apiserver

Documentation

Index

• Constants
• func GenerateToken(pvcName string, namespace string, signingKey *rsa.PrivateKey) (string, error)
• func UploadTokenRequestAPI() []*restful.WebService
• type AuthConfig
• type AuthConfigWatcher
  • func NewAuthConfigWatcher(client kubernetes.Interface, stopCh <-chan struct{}) AuthConfigWatcher
• type CdiAPIAuthorizer
  • func NewAuthorizorFromConfig(config *restclient.Config, authConfigWatcher AuthConfigWatcher) (CdiAPIAuthorizer, error)
• type CdiAPIServer
  • func NewCdiAPIServer(bindAddress string, bindPort uint, client kubernetes.Interface, ...) (CdiAPIServer, error)
• type TokenData
  • func VerifyToken(token string, publicKey *rsa.PublicKey) (*TokenData, error)

Constants

const (
	// APIPublicKeyConfigMap is the uploadProxy Public key
	APIPublicKeyConfigMap = "cdi-api-public"
)

Functions

func GenerateToken

func GenerateToken(pvcName string, namespace string, signingKey *rsa.PrivateKey) (string, error)

GenerateToken generates a token from the given parameters

func UploadTokenRequestAPI

func UploadTokenRequestAPI() []*restful.WebService

UploadTokenRequestAPI returns web service for swagger generation

Types

type AuthConfig

type AuthConfig struct {
	AllowedNames       []string
	UserHeaders        []string
	GroupHeaders       []string
	ExtraPrefixHeaders []string

	ClientCABytes              []byte
	RequestheaderClientCABytes []byte

	CertPool *x509.CertPool
}

AuthConfig contains extension-apiserver-authentication data

type AuthConfigWatcher

type AuthConfigWatcher interface {
	GetAuthConfig() *AuthConfig
}

AuthConfigWatcher is the interface of authConfigWatcher

func NewAuthConfigWatcher

func NewAuthConfigWatcher(client kubernetes.Interface, stopCh <-chan struct{}) AuthConfigWatcher

NewAuthConfigWatcher crates a new authConfigWatcher

type CdiAPIAuthorizer

type CdiAPIAuthorizer interface {
	Authorize(req *restful.Request) (bool, string, error)
}

CdiAPIAuthorizer defines methods to authorize api requests

func NewAuthorizorFromConfig

func NewAuthorizorFromConfig(config *restclient.Config, authConfigWatcher AuthConfigWatcher) (CdiAPIAuthorizer, error)

NewAuthorizorFromConfig creates a new CdiAPIAuthorizor

type CdiAPIServer

type CdiAPIServer interface {
	Start(<-chan struct{}) error
}

CdiAPIServer is the public interface to the CDI API

func NewCdiAPIServer

func NewCdiAPIServer(bindAddress string,
	bindPort uint,
	client kubernetes.Interface,
	aggregatorClient aggregatorclient.Interface,
	authorizor CdiAPIAuthorizer,
	authConfigWatcher AuthConfigWatcher) (CdiAPIServer, error)

NewCdiAPIServer returns an initialized CDI api server

type TokenData

type TokenData struct {
	PvcName           string    `json:"pvcName"`
	Namespace         string    `json:"namespace"`
	CreationTimestamp time.Time `json:"creationTimestamp"`
}

TokenData defines the data in the upload token

func VerifyToken

func VerifyToken(token string, publicKey *rsa.PublicKey) (*TokenData, error)

VerifyToken checks the token signature and returns the contents