Documentation
¶
Index ¶
- Constants
- func NewTokenCredential(ctx context.Context, opts ...auth.Option) azcore.TokenCredential
- type Implementation
- type Provider
- func (Provider) GetAudience(context.Context, corev1.ServiceAccount) (string, error)
- func (Provider) GetIdentity(serviceAccount corev1.ServiceAccount) (string, error)
- func (Provider) GetName() string
- func (p Provider) NewArtifactRegistryCredentials(ctx context.Context, registryURL string, accessToken auth.Token, ...) (*auth.ArtifactRegistryCredentials, error)
- func (p Provider) NewControllerToken(ctx context.Context, opts ...auth.Option) (auth.Token, error)
- func (p Provider) NewTokenForServiceAccount(ctx context.Context, oidcToken string, serviceAccount corev1.ServiceAccount, ...) (auth.Token, error)
- func (Provider) ParseArtifactRepository(artifactRepository string) (string, error)
- type Token
Constants ¶
View Source
const ( // https://learn.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/service-principal-managed-identity?view=azure-devops#q-can-i-use-a-service-principal-or-managed-identity-with-azure-cli ScopeDevOps = "499b84ac-1321-427f-aa17-267ca6975798/.default" // https://github.com/Azure/azure-sdk-for-go/blob/f5dfe3b53fe63aacd3aeba948bbe21d961edf376/sdk/storage/azqueue/internal/shared/shared.go#L18 ScopeBlobStorage = "https://storage.azure.com/.default" // https://github.com/Azure/azure-sdk-for-go/blob/f5dfe3b53fe63aacd3aeba948bbe21d961edf376/sdk/messaging/azeventhubs/internal/sbauth/token_provider.go#L99 ScopeEventHubs = "https://eventhubs.azure.net//.default" )
View Source
const ProviderName = "azure"
ProviderName is the name of the Azure authentication provider.
Variables ¶
This section is empty.
Functions ¶
func NewTokenCredential ¶ added in v0.11.0
NewTokenCredential creates a new token credential for the given options.
Types ¶
type Implementation ¶ added in v0.11.0
type Implementation interface {
NewDefaultAzureCredential(options *azidentity.DefaultAzureCredentialOptions) (azcore.TokenCredential, error)
NewDefaultAzureCredentialWithoutShellOut(options *azidentity.DefaultAzureCredentialOptions) (azcore.TokenCredential, error)
NewClientAssertionCredential(tenantID string, clientID string, getAssertion func(context.Context) (string, error), options *azidentity.ClientAssertionCredentialOptions) (azcore.TokenCredential, error)
SendRequest(req *http.Request, client *http.Client) (*http.Response, error)
}
Implementation provides the required methods of the Azure libraries.
type Provider ¶ added in v0.11.0
type Provider struct{ Implementation }
Provider implements the auth.Provider interface for Azure authentication.
func (Provider) GetAudience ¶ added in v0.11.0
GetAudience implements auth.Provider.
func (Provider) GetIdentity ¶ added in v0.11.0
func (Provider) GetIdentity(serviceAccount corev1.ServiceAccount) (string, error)
GetIdentity implements auth.Provider.
func (Provider) NewArtifactRegistryCredentials ¶ added in v0.12.0
func (p Provider) NewArtifactRegistryCredentials(ctx context.Context, registryURL string, accessToken auth.Token, opts ...auth.Option) (*auth.ArtifactRegistryCredentials, error)
NewArtifactRegistryCredentials implements auth.Provider.
func (Provider) NewControllerToken ¶ added in v0.12.0
NewControllerToken implements auth.Provider.
type Token ¶ added in v0.11.0
type Token struct{ azcore.AccessToken }
Token is the Azure token.
func (*Token) Credential ¶ added in v0.11.0
func (t *Token) Credential() azcore.TokenCredential
Credential gets a token credential for the token to use with Azure libraries.
func (*Token) GetDuration ¶ added in v0.11.0
GetDuration implements auth.Token.
Source Files
Click to show internal directories.
Click to hide internal directories.