azure

Documentation

Index

• Constants
• Variables
• func New(ctx context.Context, opts Options) (auth.Interface, error)
• type Authenticator
  • func (s Authenticator) Check(ctx context.Context, token string) (*authv1.UserInfo, error)
  • func (s Authenticator) UID() string
• type Claims
• type Options
  • func NewOptions() Options
  • func (o *Options) AddFlags(fs *pflag.FlagSet)
  • func (o Options) Apply(d *apps.Deployment) (extraObjs []runtime.Object, err error)
  • func (o *Options) Validate() []error
• type PoPTokenVerifier
  • func NewPoPVerifier(hostName string, popTokenValidityDuration time.Duration) *PoPTokenVerifier
  • func (p *PoPTokenVerifier) ValidatePopToken(token string) (string, error)

Constants

const (
	AKSAuthMode              = "aks"
	ARCAuthMode              = "arc"
	OBOAuthMode              = "obo"
	ClientCredentialAuthMode = "client-credential"
	PassthroughAuthMode      = "passthrough"
)

const (
	OrgType = "azure"
)

Variables

var ErrClaimNotFound = fmt.Errorf("claim not found")

ErrorClaimNotFound indicates the given key was not found in the claims

Functions

func New

func New(ctx context.Context, opts Options) (auth.Interface, error)

Types

type Authenticator

type Authenticator struct {
	Options
	// contains filtered or unexported fields
}

func (Authenticator) Check

func (s Authenticator) Check(ctx context.Context, token string) (*authv1.UserInfo, error)

func (Authenticator) UID

func (s Authenticator) UID() string

type Claims

type Claims map[string]interface{}

Claims maintains token claims

type Options

type Options struct {
	Environment                              string
	ClientID                                 string
	ClientSecret                             string
	TenantID                                 string
	UseGroupUID                              bool
	AuthMode                                 string
	AKSTokenURL                              string
	EnablePOP                                bool
	POPTokenHostname                         string
	PoPTokenValidityDuration                 time.Duration
	ResolveGroupMembershipOnlyOnOverageClaim bool
	SkipGroupMembershipResolution            bool
	VerifyClientID                           bool
	ResourceId                               string
	AzureRegion                              string
	HttpClientRetryCount                     int
}

func NewOptions

func NewOptions() Options

func (*Options) AddFlags

func (o *Options) AddFlags(fs *pflag.FlagSet)

func (Options) Apply

func (o Options) Apply(d *apps.Deployment) (extraObjs []runtime.Object, err error)

func (*Options) Validate

func (o *Options) Validate() []error

type PoPTokenVerifier

type PoPTokenVerifier struct {
	PoPTokenValidityDuration time.Duration
	// contains filtered or unexported fields
}

PopTokenVerifier is validator for PoP tokens.

func NewPoPVerifier

func NewPoPVerifier(hostName string, popTokenValidityDuration time.Duration) *PoPTokenVerifier

func (*PoPTokenVerifier) ValidatePopToken

func (p *PoPTokenVerifier) ValidatePopToken(token string) (string, error)

ValidatePopToken is validating the pop token RFC : https://datatracker.ietf.org/doc/html/rfc7800