io.kubernetes.client.util.authenticators

Class OpenIDConnectAuthenticator

java.lang.Object

io.kubernetes.client.util.authenticators.OpenIDConnectAuthenticator

All Implemented Interfaces:

Authenticator

public class OpenIDConnectAuthenticator
extends Object
implements Authenticator

OpenIDConnectAuthenticator

Field Summary

Fields

Modifier and Type	Field and Description
static String	OIDC_CLIENT_ID The client_id
static String	OIDC_CLIENT_SECRET Optional client secret
static String	OIDC_ID_TOKEN The id_token
static String	OIDC_IDP_CERT_DATA Optional IdP TLS Certificate
static String	OIDC_ISSUER The issuer
static String	OIDC_REFRESH_TOKEN The refresh_token

Constructor Summary

Constructors

Constructor and Description
OpenIDConnectAuthenticator()

Method Summary

Modifier and Type	Method and Description
String	getName() Return the name of this authenticator, this should be the value that is also in a kubeconfig file.
String	getToken(Map<String,Object> config) Get a token from this authenticator.
boolean	isExpired(Map<String,Object> config) Determine if this config is expired
Map<String,Object>	refresh(Map<String,Object> config) Refresh an expired token with a new fresh one.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

OIDC_ID_TOKEN

public static final String OIDC_ID_TOKEN

The id_token

See Also:

Constant Field Values

OIDC_ISSUER

public static final String OIDC_ISSUER

The issuer

See Also:

Constant Field Values

OIDC_REFRESH_TOKEN

public static final String OIDC_REFRESH_TOKEN

The refresh_token

See Also:

Constant Field Values

OIDC_CLIENT_ID

public static final String OIDC_CLIENT_ID

The client_id

See Also:

Constant Field Values

OIDC_CLIENT_SECRET

public static final String OIDC_CLIENT_SECRET

Optional client secret

See Also:

Constant Field Values

OIDC_IDP_CERT_DATA

public static final String OIDC_IDP_CERT_DATA

Optional IdP TLS Certificate

See Also:

Constant Field Values

Constructor Detail

OpenIDConnectAuthenticator

public OpenIDConnectAuthenticator()

Method Detail

getName

public String getName()

Description copied from interface: Authenticator

Return the name of this authenticator, this should be the value that is also in a kubeconfig file.

Specified by:

getName in interface Authenticator

getToken

public String getToken(Map<String,Object> config)

Description copied from interface: Authenticator

Get a token from this authenticator.

Specified by:

getToken in interface Authenticator

Parameters:

config - The configuration information for this authenticator

Returns:

The new token, null of no such token can be found/generated

isExpired

public boolean isExpired(Map<String,Object> config)

Description copied from interface: Authenticator

Determine if this config is expired

Specified by:

isExpired in interface Authenticator

refresh

public Map<String,Object> refresh(Map<String,Object> config)

Description copied from interface: Authenticator

Refresh an expired token with a new fresh one.

Specified by:

refresh in interface Authenticator