apiserver

Documentation

Index

• Constants
• func UploadTokenRequestAPI() []*restful.WebService
• type AuthConfig
  • func (ac *AuthConfig) ValidateName(name string) bool
• type AuthConfigWatcher
  • func NewAuthConfigWatcher(ctx context.Context, client kubernetes.Interface) (AuthConfigWatcher, error)
• type CdiAPIAuthorizer
  • func NewAuthorizorFromConfig(config *restclient.Config, authConfigWatcher AuthConfigWatcher) (CdiAPIAuthorizer, error)
• type CdiAPIServer
  • func NewCdiAPIServer(bindAddress string, bindPort uint, client kubernetes.Interface, ...) (CdiAPIServer, error)
• type CertWatcher

Constants

const (
	// APISigningKeySecretName is the selfsigned cert secret name
	//nolint:gosec // This is not a real secret
	APISigningKeySecretName = "cdi-api-signing-key"
)

Functions

func UploadTokenRequestAPI

func UploadTokenRequestAPI() []*restful.WebService

UploadTokenRequestAPI returns web service for swagger generation

Types

type AuthConfig

type AuthConfig struct {
	AllowedNames       []string
	UserHeaders        []string
	GroupHeaders       []string
	ExtraPrefixHeaders []string

	ClientCABytes              []byte
	RequestheaderClientCABytes []byte

	CertPool *x509.CertPool
}

AuthConfig contains extension-apiserver-authentication data

func (*AuthConfig) ValidateName

func (ac *AuthConfig) ValidateName(name string) bool

ValidateName checks if name is allowed

type AuthConfigWatcher

type AuthConfigWatcher interface {
	GetAuthConfig() *AuthConfig
}

AuthConfigWatcher is the interface of authConfigWatcher

func NewAuthConfigWatcher

func NewAuthConfigWatcher(ctx context.Context, client kubernetes.Interface) (AuthConfigWatcher, error)

NewAuthConfigWatcher crates a new authConfigWatcher

type CdiAPIAuthorizer

type CdiAPIAuthorizer interface {
	Authorize(req *restful.Request) (bool, string, error)
}

CdiAPIAuthorizer defines methods to authorize api requests

func NewAuthorizorFromConfig

func NewAuthorizorFromConfig(config *restclient.Config, authConfigWatcher AuthConfigWatcher) (CdiAPIAuthorizer, error)

NewAuthorizorFromConfig creates a new CdiAPIAuthorizor

type CdiAPIServer

type CdiAPIServer interface {
	Start(<-chan struct{}) error
}

CdiAPIServer is the public interface to the CDI API

func NewCdiAPIServer

func NewCdiAPIServer(bindAddress string,
	bindPort uint,
	client kubernetes.Interface,
	aggregatorClient aggregatorclient.Interface,
	cdiClient cdiclient.Interface,
	snapClient snapclient.Interface,
	controllerRuntimeClient client.Client,
	authorizor CdiAPIAuthorizer,
	authConfigWatcher AuthConfigWatcher,
	cdiConfigTLSWatcher cryptowatch.CdiConfigTLSWatcher,
	certWatcher CertWatcher,
	installerLabels map[string]string) (CdiAPIServer, error)

NewCdiAPIServer returns an initialized CDI api server

type CertWatcher

type CertWatcher interface {
	GetCertificate(_ *tls.ClientHelloInfo) (*tls.Certificate, error)
}

CertWatcher is the interface for resources that watch certs