serviceaccount

Apr 8, 2016

Changes in this version

+ const AllServiceAccountsGroup

+ const ServiceAccountGroupPrefix

+ func IsServiceAccountToken(secret *api.Secret, sa *api.ServiceAccount) bool

+ func MakeGroupNames(namespace, name string) []string

+ func MakeNamespaceGroupName(namespace string) string

+ func UserInfo(namespace, name, uid string) user.Info

Jul 16, 2015

Changes in this version

type TokensControllerOptions

+ RootCA []byte

Jun 22, 2015

Changes in this version

+ const Issuer

+ const IssuerClaim

+ const NamespaceClaim

+ const SecretNameClaim

+ const ServiceAccountNameClaim

+ const ServiceAccountUIDClaim

+ const ServiceAccountUsernamePrefix

+ const ServiceAccountUsernameSeparator

+ const SubjectClaim

+ func JWTTokenAuthenticator(keys []*rsa.PublicKey, lookup bool, getter ServiceAccountTokenGetter) authenticator.Token

+ func MakeUsername(namespace, name string) string

+ func ReadPrivateKey(file string) (*rsa.PrivateKey, error)

+ func ReadPublicKey(file string) (*rsa.PublicKey, error)

+ func SplitUsername(username string) (string, string, error)

+ type ServiceAccountTokenGetter interface

+ GetSecret func(namespace, name string) (*api.Secret, error)

+ GetServiceAccount func(namespace, name string) (*api.ServiceAccount, error)

+ func NewGetterFromClient(c client.Interface) ServiceAccountTokenGetter

+ func NewGetterFromEtcdHelper(helper tools.EtcdHelper) ServiceAccountTokenGetter

+ func NewGetterFromRegistries(serviceAccounts serviceaccount.Registry, secrets secret.Registry) ServiceAccountTokenGetter

+ type ServiceAccountsController struct

+ func NewServiceAccountsController(cl client.Interface, options ServiceAccountsControllerOptions) *ServiceAccountsController

+ func (e *ServiceAccountsController) Run()

+ func (e *ServiceAccountsController) Stop()

+ type ServiceAccountsControllerOptions struct

+ Names util.StringSet

+ NamespaceResync time.Duration

+ ServiceAccountResync time.Duration

+ func DefaultServiceAccountsControllerOptions() ServiceAccountsControllerOptions

+ type TokenGenerator interface

+ GenerateToken func(serviceAccount api.ServiceAccount, secret api.Secret) (string, error)

+ func JWTTokenGenerator(key *rsa.PrivateKey) TokenGenerator

+ type TokensController struct

+ func NewTokensController(cl client.Interface, options TokensControllerOptions) *TokensController

+ func (e *TokensController) Run()

+ func (e *TokensController) Stop()

+ type TokensControllerOptions struct

+ SecretResync time.Duration

+ ServiceAccountResync time.Duration

+ TokenGenerator TokenGenerator

+ func DefaultTokenControllerOptions(tokenGenerator TokenGenerator) TokensControllerOptions