package tokenreview

import "istio.io/istio/security/pkg/k8s/tokenreview"

Index ¶

• func ValidateK8sJwt(kubeClient kubernetes.Interface, targetToken string, aud []string) ([]string, error)

Package Files ¶

k8sauthn.go

func ValidateK8sJwt ¶ Uses

func ValidateK8sJwt(kubeClient kubernetes.Interface, targetToken string, aud []string) ([]string, error)

ValidateK8sJwt validates a k8s JWT at API server. Return {<namespace>, <serviceaccountname>} in the targetToken when the validation passes. Otherwise, return the error. targetToken: the JWT of the K8s service account to be reviewed aud: list of audiences to check. If empty 1st party tokens will be checked.