bootstrapauthenticator

Documentation

Index

• Constants
• type BootstrapUserData
• type BootstrapUserDataGetter
  • func NewBootstrapUserDataGetter(secrets v1.SecretsGetter, namespaces v1.NamespacesGetter) BootstrapUserDataGetter
• type Password
  • func New(getter BootstrapUserDataGetter) Password

Constants

const (
	// BootstrapUser is the magic bootstrap OAuth user that can perform any action
	BootstrapUser = "kube:admin"
)

Types

type BootstrapUserData

type BootstrapUserData struct {
	PasswordHash []byte
	UID          string
}

type BootstrapUserDataGetter

type BootstrapUserDataGetter interface {
	Get() (data *BootstrapUserData, ok bool, err error)
	IsEnabled() (bool, error)
}

func NewBootstrapUserDataGetter

func NewBootstrapUserDataGetter(secrets v1.SecretsGetter, namespaces v1.NamespacesGetter) BootstrapUserDataGetter

type Password

type Password interface {
	AuthenticatePassword(ctx context.Context, user, password string) (*authenticator.Response, bool, error)
}

Password checks a username and password against a backing authentication store and returns a Response or an error if the password could not be checked.

This was copied from k8s.io/apiserver/pkg/authentication/authenticator due to its removal in 1.19.

func New

func New(getter BootstrapUserDataGetter) Password