auth

Documentation

Index

• type AwsAuthProvider
  • func NewAwsAuthProvider(sessionName string, corev1 *corev1rest.CoreV1Interface) (*AwsAuthProvider, error)
  • func (p *AwsAuthProvider) NewSession(details *cfapi.AwsAuth, namespace *string) (*session.Session, error)

Types

type AwsAuthProvider

type AwsAuthProvider struct {
	// contains filtered or unexported fields
}

The AwsAuthProvider is used to create a session based on a kubernetes object's config. If the given AwsAuth details specify an access key secret, it is loaded and that is used. If it specified a JWT using a ServiceAccount token, one is generated on the fly. Using ambient credentials is the fallback.

func NewAwsAuthProvider

func NewAwsAuthProvider(sessionName string, corev1 *corev1rest.CoreV1Interface) (*AwsAuthProvider, error)

Creates an AwsAuthProvider, with the given sessionName and kubernetes client.

func (*AwsAuthProvider) NewSession

func (p *AwsAuthProvider) NewSession(details *cfapi.AwsAuth, namespace *string) (*session.Session, error)

Creates a new session from the given AwsAuth details. If the details were loaded from a namespace, any referenced Secrets or Service Accountswill be loaded from that same namespace. Otherwise, it will read the namespace from the AwsAuth details.