kubernetes: k8s.io/kubernetes/pkg/kubelet/token Index | Files

package token

import "k8s.io/kubernetes/pkg/kubelet/token"

Package token implements a manager of serviceaccount tokens for pods running on the node.


Package Files


type Manager Uses

type Manager struct {
    // contains filtered or unexported fields

Manager manages service account tokens for pods.

func NewManager Uses

func NewManager(c clientset.Interface) *Manager

NewManager returns a new token manager.

func (*Manager) DeleteServiceAccountToken Uses

func (m *Manager) DeleteServiceAccountToken(podUID types.UID)

DeleteServiceAccountToken should be invoked when pod got deleted. It simply clean token manager cache.

func (*Manager) GetServiceAccountToken Uses

func (m *Manager) GetServiceAccountToken(namespace, name string, tr *authenticationv1.TokenRequest) (*authenticationv1.TokenRequest, error)

GetServiceAccountToken gets a service account token for a pod from cache or from the TokenRequest API. This process is as follows: * Check the cache for the current token request. * If the token exists and does not require a refresh, return the current token. * Attempt to refresh the token. * If the token is refreshed successfully, save it in the cache and return the token. * If refresh fails and the old token is still valid, log an error and return the old token. * If refresh fails and the old token is no longer valid, return an error

Package token imports 10 packages (graph) and is imported by 1 packages. Updated 2019-02-12. Refresh now. Tools for package owners.