auth

Jul 9, 2024

Changes in this version

+ const OIDCLabelKey

+ const OIDCLabelSelector

Jan 23, 2024

Changes in this version

+ const TokenExpirationTime

+ func DeleteOIDCServiceAccountIfExists(ctx context.Context, serviceAccountLister corev1listers.ServiceAccountLister, ...) error

+ func GetJWTExpiry(token string) (time.Time, error)

+ func SetupOIDCServiceAccount(ctx context.Context, flags feature.Flags, ...) pkgreconciler.Event

+ type OIDCIdentityStatusMarker interface

+ MarkOIDCIdentityCreatedFailed func(reason, messageFormat string, messageA ...interface{})

+ MarkOIDCIdentityCreatedSucceeded func()

+ MarkOIDCIdentityCreatedSucceededWithReason func(reason, messageFormat string, messageA ...interface{})

type OIDCTokenProvider

+ func (c *OIDCTokenProvider) GetNewJWT(serviceAccount types.NamespacedName, audience string) (string, error)

type OIDCTokenVerifier

+ func (tokenVerifier *OIDCTokenVerifier) VerifyJWTFromRequest(ctx context.Context, r *http.Request, audience *string, ...) error

Oct 24, 2023

Changes in this version

+ const AuthHeaderKey

+ func EnsureOIDCServiceAccountExistsForResource(ctx context.Context, serviceAccountLister corev1listers.ServiceAccountLister, ...) error

+ func GetAudience(gvk schema.GroupVersionKind, objectMeta metav1.ObjectMeta) string

+ func GetJWTFromHeader(header http.Header) string

+ func GetOIDCServiceAccountForResource(gvk schema.GroupVersionKind, objectMeta metav1.ObjectMeta) *v1.ServiceAccount

+ func GetOIDCServiceAccountNameForResource(gvk schema.GroupVersionKind, objectMeta metav1.ObjectMeta) string

+ func SetAuthHeader(jwt string, header http.Header)

+ type IDToken struct

+ AccessTokenHash string

+ Audience []string

+ Expiry time.Time

+ IssuedAt time.Time

+ Issuer string

+ Subject string

+ type OIDCTokenProvider struct

+ func NewOIDCTokenProvider(ctx context.Context) *OIDCTokenProvider

+ func (c *OIDCTokenProvider) GetJWT(serviceAccount types.NamespacedName, audience string) (string, error)

+ type OIDCTokenVerifier struct

+ func NewOIDCTokenVerifier(ctx context.Context) *OIDCTokenVerifier

+ func (c *OIDCTokenVerifier) VerifyJWT(ctx context.Context, jwt, audience string) (*IDToken, error)