tokengetter.go 2.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263
  1. /*
  2. Copyright 2014 The Kubernetes Authors.
  3. Licensed under the Apache License, Version 2.0 (the "License");
  4. you may not use this file except in compliance with the License.
  5. You may obtain a copy of the License at
  6. http://www.apache.org/licenses/LICENSE-2.0
  7. Unless required by applicable law or agreed to in writing, software
  8. distributed under the License is distributed on an "AS IS" BASIS,
  9. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  10. See the License for the specific language governing permissions and
  11. limitations under the License.
  12. */
  13. package serviceaccount
  14. import (
  15. "k8s.io/api/core/v1"
  16. metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
  17. clientset "k8s.io/client-go/kubernetes"
  18. v1listers "k8s.io/client-go/listers/core/v1"
  19. "k8s.io/kubernetes/pkg/serviceaccount"
  20. )
  21. // clientGetter implements ServiceAccountTokenGetter using a clientset.Interface
  22. type clientGetter struct {
  23. client clientset.Interface
  24. secretLister v1listers.SecretLister
  25. serviceAccountLister v1listers.ServiceAccountLister
  26. podLister v1listers.PodLister
  27. }
  28. // NewGetterFromClient returns a ServiceAccountTokenGetter that
  29. // uses the specified client to retrieve service accounts and secrets.
  30. // The client should NOT authenticate using a service account token
  31. // the returned getter will be used to retrieve, or recursion will result.
  32. func NewGetterFromClient(c clientset.Interface, secretLister v1listers.SecretLister, serviceAccountLister v1listers.ServiceAccountLister, podLister v1listers.PodLister) serviceaccount.ServiceAccountTokenGetter {
  33. return clientGetter{c, secretLister, serviceAccountLister, podLister}
  34. }
  35. func (c clientGetter) GetServiceAccount(namespace, name string) (*v1.ServiceAccount, error) {
  36. if serviceAccount, err := c.serviceAccountLister.ServiceAccounts(namespace).Get(name); err == nil {
  37. return serviceAccount, nil
  38. }
  39. return c.client.CoreV1().ServiceAccounts(namespace).Get(name, metav1.GetOptions{})
  40. }
  41. func (c clientGetter) GetPod(namespace, name string) (*v1.Pod, error) {
  42. if pod, err := c.podLister.Pods(namespace).Get(name); err == nil {
  43. return pod, nil
  44. }
  45. return c.client.CoreV1().Pods(namespace).Get(name, metav1.GetOptions{})
  46. }
  47. func (c clientGetter) GetSecret(namespace, name string) (*v1.Secret, error) {
  48. if secret, err := c.secretLister.Secrets(namespace).Get(name); err == nil {
  49. return secret, nil
  50. }
  51. return c.client.CoreV1().Secrets(namespace).Get(name, metav1.GetOptions{})
  52. }