package stsclient

import "istio.io/istio/security/pkg/nodeagent/plugin/providers/google/stsclient"

Package stsclient is for oauth token exchange integration.

Index ¶

• Variables
• func NewPlugin() plugin.Plugin
• type Plugin
• func (p Plugin) ExchangeToken(ctx context.Context, trustDomain, k8sSAjwt string) ( string, time.Time, int, error)

Package Files ¶

stsclient.go

Variables ¶

var (
    // GKEClusterURL is the URL to send requests to the token exchange service.
    GKEClusterURL = env.RegisterStringVar("GKE_CLUSTER_URL", "", "The url of GKE cluster").Get()
    // SecureTokenEndpoint is the Endpoint the STS client calls to.
    SecureTokenEndpoint = "https://securetoken.googleapis.com/v1/identitybindingtoken"
)

func NewPlugin ¶ Uses

func NewPlugin() plugin.Plugin

NewPlugin returns an instance of secure token service client plugin

type Plugin ¶ Uses

type Plugin struct {
    // contains filtered or unexported fields
}

Plugin for google securetoken api interaction.

func (Plugin) ExchangeToken ¶ Uses

func (p Plugin) ExchangeToken(ctx context.Context, trustDomain, k8sSAjwt string) (
    string, time.Time, int, error)

ExchangeToken exchange oauth access token from trusted domain and k8s sa jwt.