Documentation ¶
Index ¶
- func ClearAuthenticationHeaders(h http.Header, ...)
- func New(nameHeaders, groupHeaders, extraHeaderPrefixes []string) (authenticator.Request, error)
- func NewDynamic(nameHeaders, groupHeaders, extraHeaderPrefixes StringSliceProvider) authenticator.Request
- func NewDynamicVerifyOptionsSecure(verifyOptionFn x509request.VerifyOptionFunc, ...) authenticator.Request
- type RequestHeaderAuthRequestController
- func (c *RequestHeaderAuthRequestController) AllowedClientNames() []string
- func (c *RequestHeaderAuthRequestController) ExtraHeaderPrefixes() []string
- func (c *RequestHeaderAuthRequestController) GroupHeaders() []string
- func (c *RequestHeaderAuthRequestController) Run(ctx context.Context, workers int)
- func (c *RequestHeaderAuthRequestController) RunOnce(ctx context.Context) error
- func (c *RequestHeaderAuthRequestController) UsernameHeaders() []string
- type RequestHeaderAuthRequestProvider
- type StaticStringSlice
- type StringSliceProvider
- type StringSliceProviderFunc
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ClearAuthenticationHeaders ¶ added in v0.24.13
func ClearAuthenticationHeaders(h http.Header, nameHeaders, groupHeaders, extraHeaderPrefixes StringSliceProvider)
func New ¶
func New(nameHeaders, groupHeaders, extraHeaderPrefixes []string) (authenticator.Request, error)
func NewDynamic ¶ added in v0.17.0
func NewDynamic(nameHeaders, groupHeaders, extraHeaderPrefixes StringSliceProvider) authenticator.Request
func NewDynamicVerifyOptionsSecure ¶ added in v0.17.0
func NewDynamicVerifyOptionsSecure(verifyOptionFn x509request.VerifyOptionFunc, proxyClientNames, nameHeaders, groupHeaders, extraHeaderPrefixes StringSliceProvider) authenticator.Request
Types ¶
type RequestHeaderAuthRequestController ¶ added in v0.19.0
type RequestHeaderAuthRequestController struct {
// contains filtered or unexported fields
}
RequestHeaderAuthRequestController a controller that exposes a set of methods for dynamically filling parts of RequestHeaderConfig struct. The methods are sourced from the config map which is being monitored by this controller. The controller is primed from the server at the construction time for components that don't want to dynamically react to changes in the config map.
func NewRequestHeaderAuthRequestController ¶ added in v0.19.0
func NewRequestHeaderAuthRequestController( cmName string, cmNamespace string, client kubernetes.Interface, usernameHeadersKey, groupHeadersKey, extraHeaderPrefixesKey, allowedClientNamesKey string) *RequestHeaderAuthRequestController
NewRequestHeaderAuthRequestController creates a new controller that implements RequestHeaderAuthRequestController
func (*RequestHeaderAuthRequestController) AllowedClientNames ¶ added in v0.19.0
func (c *RequestHeaderAuthRequestController) AllowedClientNames() []string
func (*RequestHeaderAuthRequestController) ExtraHeaderPrefixes ¶ added in v0.19.0
func (c *RequestHeaderAuthRequestController) ExtraHeaderPrefixes() []string
func (*RequestHeaderAuthRequestController) GroupHeaders ¶ added in v0.19.0
func (c *RequestHeaderAuthRequestController) GroupHeaders() []string
func (*RequestHeaderAuthRequestController) Run ¶ added in v0.19.0
func (c *RequestHeaderAuthRequestController) Run(ctx context.Context, workers int)
Run starts RequestHeaderAuthRequestController controller and blocks until stopCh is closed.
func (*RequestHeaderAuthRequestController) RunOnce ¶ added in v0.19.0
func (c *RequestHeaderAuthRequestController) RunOnce(ctx context.Context) error
// RunOnce runs a single sync loop
func (*RequestHeaderAuthRequestController) UsernameHeaders ¶ added in v0.19.0
func (c *RequestHeaderAuthRequestController) UsernameHeaders() []string
type RequestHeaderAuthRequestProvider ¶ added in v0.19.0
type RequestHeaderAuthRequestProvider interface { UsernameHeaders() []string GroupHeaders() []string ExtraHeaderPrefixes() []string AllowedClientNames() []string }
RequestHeaderAuthRequestProvider a provider that knows how to dynamically fill parts of RequestHeaderConfig struct
type StaticStringSlice ¶ added in v0.17.0
type StaticStringSlice []string
StaticStringSlice a StringSliceProvider that returns a fixed value
func (StaticStringSlice) Value ¶ added in v0.17.0
func (s StaticStringSlice) Value() []string
Value returns the current string slice. Callers should never mutate the returned value.
type StringSliceProvider ¶ added in v0.17.0
type StringSliceProvider interface { // Value returns the current string slice. Callers should never mutate the returned value. Value() []string }
StringSliceProvider is a way to get a string slice value. It is heavily used for authentication headers among other places.
type StringSliceProviderFunc ¶ added in v0.17.0
type StringSliceProviderFunc func() []string
StringSliceProviderFunc is a function that matches the StringSliceProvider interface
func (StringSliceProviderFunc) Value ¶ added in v0.17.0
func (d StringSliceProviderFunc) Value() []string
Value returns the current string slice. Callers should never mutate the returned value.