kubeauth

Documentation

Index

• Constants
• func ExtractClusterID(ctx context.Context) cluster.ID
• type KubeJWTAuthenticator
  • func NewKubeJWTAuthenticator(meshHolder mesh.Holder, client kubernetes.Interface, clusterID cluster.ID, ...) *KubeJWTAuthenticator
  • func (a *KubeJWTAuthenticator) Authenticate(authRequest security.AuthContext) (*security.Caller, error)
  • func (a *KubeJWTAuthenticator) AuthenticatorType() string
• type RemoteKubeClientGetter

Constants

const (
	KubeJWTAuthenticatorType = "KubeJWTAuthenticator"
)

Functions

func ExtractClusterID

func ExtractClusterID(ctx context.Context) cluster.ID

Types

type KubeJWTAuthenticator

type KubeJWTAuthenticator struct {
	// contains filtered or unexported fields
}

KubeJWTAuthenticator authenticates K8s JWTs.

func NewKubeJWTAuthenticator

func NewKubeJWTAuthenticator(
	meshHolder mesh.Holder,
	client kubernetes.Interface,
	clusterID cluster.ID,
	remoteKubeClientGetter RemoteKubeClientGetter,
) *KubeJWTAuthenticator

NewKubeJWTAuthenticator creates a new kubeJWTAuthenticator.

func (*KubeJWTAuthenticator) Authenticate

func (a *KubeJWTAuthenticator) Authenticate(authRequest security.AuthContext) (*security.Caller, error)

Authenticate authenticates the call using the K8s JWT from the context. The returned Caller.Identities is in SPIFFE format.

func (*KubeJWTAuthenticator) AuthenticatorType

func (a *KubeJWTAuthenticator) AuthenticatorType() string

type RemoteKubeClientGetter

type RemoteKubeClientGetter interface {
	GetRemoteKubeClient(clusterID cluster.ID) kubernetes.Interface
	ListClusters() []cluster.ID
}