tigerakvc

package

v1.44.0 Latest Latest Go to latest Published: Oct 1, 2026 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/tigera/operator

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func New(issuerURL string, clientID string, options ...Option) (authentication.KeyValidatorConfig, error)
type CloudAuthenticationConfig
type KeyValidatorConfig
type Option

Constants ¶

View Source

const (
	StaticWellKnownJWKSConfigMapName = "tigera-static-wellknown-jwks"
)

Variables ¶

This section is empty.

Functions ¶

func New ¶

func New(issuerURL string, clientID string, options ...Option) (authentication.KeyValidatorConfig, error)

Types ¶

type CloudAuthenticationConfig ¶ added in v1.44.0

type CloudAuthenticationConfig struct {
	// contains filtered or unexported fields
}

CloudAuthenticationConfig holds Calico Cloud specific authentication settings. It is only populated for cloud installs (via WithTenantClaim); for regular Calico/Calico Enterprise installs requireTenantClaim is false and addCloudEnvs is a no-op, so no cloud env vars are emitted and enterprise behavior is unchanged.

type KeyValidatorConfig ¶

type KeyValidatorConfig struct {
	// contains filtered or unexported fields
}

KeyValidatorConfig implements the KeyValidatorConfig interface. It uses the OIDC implicit flow, and maps the wellknown config / jwks keys to a config map.

func (*KeyValidatorConfig) ClientID ¶

func (kvc *KeyValidatorConfig) ClientID() string

func (*KeyValidatorConfig) Issuer ¶

func (kvc *KeyValidatorConfig) Issuer() string

func (*KeyValidatorConfig) RequiredAnnotations ¶

func (kvc *KeyValidatorConfig) RequiredAnnotations() map[string]string

func (*KeyValidatorConfig) RequiredConfigMaps ¶

func (kvc *KeyValidatorConfig) RequiredConfigMaps(namespace string) []*corev1.ConfigMap

func (*KeyValidatorConfig) RequiredEnv ¶

func (kvc *KeyValidatorConfig) RequiredEnv(prefix string) []corev1.EnvVar

func (*KeyValidatorConfig) RequiredSecrets ¶

func (kvc *KeyValidatorConfig) RequiredSecrets(namespace string) []*corev1.Secret

func (*KeyValidatorConfig) RequiredVolumeMounts ¶

func (kvc *KeyValidatorConfig) RequiredVolumeMounts() []corev1.VolumeMount

func (*KeyValidatorConfig) RequiredVolumes ¶

func (kvc *KeyValidatorConfig) RequiredVolumes() []corev1.Volume

type Option ¶

type Option func(*KeyValidatorConfig)

func WithGroupsClaim ¶

func WithGroupsClaim(groupClaim string) Option

func WithGroupsPrefix ¶

func WithGroupsPrefix(groupsPrefix string) Option

func WithRootCA ¶ added in v1.27.0

func WithRootCA(rootCA []byte) Option

func WithTenantClaim ¶ added in v1.44.0

func WithTenantClaim(tenantID string) Option

WithTenantClaim configures the KeyValidatorConfig to require and validate a Calico Cloud tenant claim. It must only be supplied for cloud installs.

func WithUsernameClaim ¶

func WithUsernameClaim(usernameClaim string) Option

func WithUsernamePrefix ¶

func WithUsernamePrefix(usernamePrefix string) Option

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL