Documentation
¶
Index ¶
Constants ¶
View Source
const (
KubeletSubsystem = "kubelet"
)
Variables ¶
This section is empty.
Functions ¶
func NewExternalCredentialProviderDockerKeyring ¶ added in v1.33.0
func NewExternalCredentialProviderDockerKeyring(podNamespace, podName, podUID, serviceAccountName string) credentialprovider.DockerKeyring
func RegisterCredentialProviderPlugins ¶
func RegisterCredentialProviderPlugins(pluginConfigFile, pluginBinDir string, getServiceAccountToken getServiceAccountTokenFunc, getServiceAccount GetServiceAccountFunc, ) error
RegisterCredentialProviderPlugins is called from kubelet to register external credential provider plugins according to the CredentialProviderConfig config file.
Types ¶
type GetServiceAccountFunc ¶ added in v1.33.0
type GetServiceAccountFunc func(namespace, name string) (*v1.ServiceAccount, error)
GetServiceAccountFunc is a function type that returns a service account for the given namespace and name.
type Plugin ¶
type Plugin interface {
ExecPlugin(ctx context.Context, image, serviceAccountToken string, serviceAccountAnnotations map[string]string) (*credentialproviderapi.CredentialProviderResponse, error)
}
Plugin is the interface calling ExecPlugin. This is mainly for testability so tests don't have to actually exec any processes.
Click to show internal directories.
Click to hide internal directories.