multicluster

Overview ¶

Command multicluster is an example auth handler that maintains a separate credential per instance (cluster/server), keyed by hostname. It demonstrates the per-instance capabilities and request fields:

• auth.CapHostname -- Login honors LoginRequest.Hostname
• auth.CapTokenHostname -- GetToken honors TokenRequest.Hostname
• auth.CapInstanceHostname -- GetStatus/Logout honor their request Hostname
• auth.CapCallbackPort -- Login reads LoginRequest.CallbackPort

Each hostname selects an independent session, so a single handler can serve many clusters (e.g. as a kubectl/oc exec credential plugin) without one cluster's token leaking into another's requests.