azure

Documentation

Index

• Constants
• Variables
• func New(opts Options) (auth.Interface, error)
• type Authenticator
  • func (s Authenticator) Check(token string) (*authv1.UserInfo, error)
  • func (s Authenticator) UID() string
• type Claims
• type Options
  • func NewOptions() Options
  • func (o *Options) AddFlags(fs *pflag.FlagSet)
  • func (o Options) Apply(d *apps.Deployment) (extraObjs []runtime.Object, err error)
  • func (o *Options) Validate() []error
• type PoPTokenVerifier
  • func NewPoPVerifier(hostName string, popTokenValidityDuration time.Duration) *PoPTokenVerifier
  • func (p *PoPTokenVerifier) ValidatePopToken(token string) (string, error)

Constants

const (
	AKSAuthMode              = "aks"
	OBOAuthMode              = "obo"
	ClientCredentialAuthMode = "client-credential"
	PassthroughAuthMode      = "passthrough"
)

const (
	OrgType = "azure"
)

Variables

var ErrClaimNotFound = fmt.Errorf("claim not found")

ErrorClaimNotFound indicates the given key was not found in the claims

Functions

func New

func New(opts Options) (auth.Interface, error)

Types

type Authenticator

type Authenticator struct {
	Options
	// contains filtered or unexported fields
}

func (Authenticator) Check

func (s Authenticator) Check(token string) (*authv1.UserInfo, error)

func (Authenticator) UID

func (s Authenticator) UID() string

type Claims

type Claims map[string]interface{}

Claims maintains token claims

type Options

type Options struct {
	Environment                              string
	ClientID                                 string
	ClientSecret                             string
	TenantID                                 string
	UseGroupUID                              bool
	AuthMode                                 string
	AKSTokenURL                              string
	EnablePOP                                bool
	POPTokenHostname                         string
	PoPTokenValidityDuration                 time.Duration
	ResolveGroupMembershipOnlyOnOverageClaim bool
	SkipGroupMembershipResolution            bool
	VerifyClientID                           bool
}

func NewOptions

func NewOptions() Options

func (*Options) AddFlags

func (o *Options) AddFlags(fs *pflag.FlagSet)

func (Options) Apply

func (o Options) Apply(d *apps.Deployment) (extraObjs []runtime.Object, err error)

func (*Options) Validate

func (o *Options) Validate() []error

type PoPTokenVerifier

type PoPTokenVerifier struct {
	PoPTokenValidityDuration time.Duration
	// contains filtered or unexported fields
}

PopTokenVerifier is validator for PoP tokens.

func NewPoPVerifier

func NewPoPVerifier(hostName string, popTokenValidityDuration time.Duration) *PoPTokenVerifier

func (*PoPTokenVerifier) ValidatePopToken

func (p *PoPTokenVerifier) ValidatePopToken(token string) (string, error)

ValidatePopToken is validating the pop token RFC : https://datatracker.ietf.org/doc/html/rfc7800