Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Authentication ¶
type Authentication struct {
ClientCert apiserveroptions.ClientCertAuthenticationOptions
PassOnGroups []string
DropGroups []string
}
Authentication wraps ClientCertAuthenticationOptions so we don't pull in more auth machinery than we need with DelegatingAuthenticationOptions
func NewAuthentication ¶
func NewAuthentication() *Authentication
NewAuthentication creates a default Authentication
func (*Authentication) AddFlags ¶
func (c *Authentication) AddFlags(fs *pflag.FlagSet)
AddFlags delegates to ClientCertAuthenticationOptions
func (*Authentication) ApplyTo ¶
func (c *Authentication) ApplyTo(authenticationInfo *genericapiserver.AuthenticationInfo, servingInfo *genericapiserver.SecureServingInfo) error
ApplyTo sets up the x509 Authenticator if the client-ca-file option was passed
func (*Authentication) Validate ¶
func (c *Authentication) Validate() []error
Validate just completes the options pattern. Returns nil.
type GroupFilter ¶
type GroupFilter struct {
Authenticator authenticator.Request
PassOnGroups sets.String
DropGroups sets.String
PassOnGroupPrefixes []string
DropGroupPrefixes []string
}
GroupFilter is a filter that filters out group that are not in the allowed groups, and groups that are in the disallowed groups.
func (*GroupFilter) AuthenticateRequest ¶
func (a *GroupFilter) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error)
Click to show internal directories.
Click to hide internal directories.