tokengetter.go 2.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364
  1. /*
  2. Copyright 2014 The Kubernetes Authors.
  3. Licensed under the Apache License, Version 2.0 (the "License");
  4. you may not use this file except in compliance with the License.
  5. You may obtain a copy of the License at
  6. http://www.apache.org/licenses/LICENSE-2.0
  7. Unless required by applicable law or agreed to in writing, software
  8. distributed under the License is distributed on an "AS IS" BASIS,
  9. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  10. See the License for the specific language governing permissions and
  11. limitations under the License.
  12. */
  13. package serviceaccount
  14. import (
  15. "context"
  16. "k8s.io/api/core/v1"
  17. metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
  18. clientset "k8s.io/client-go/kubernetes"
  19. v1listers "k8s.io/client-go/listers/core/v1"
  20. "k8s.io/kubernetes/pkg/serviceaccount"
  21. )
  22. // clientGetter implements ServiceAccountTokenGetter using a clientset.Interface
  23. type clientGetter struct {
  24. client clientset.Interface
  25. secretLister v1listers.SecretLister
  26. serviceAccountLister v1listers.ServiceAccountLister
  27. podLister v1listers.PodLister
  28. }
  29. // NewGetterFromClient returns a ServiceAccountTokenGetter that
  30. // uses the specified client to retrieve service accounts and secrets.
  31. // The client should NOT authenticate using a service account token
  32. // the returned getter will be used to retrieve, or recursion will result.
  33. func NewGetterFromClient(c clientset.Interface, secretLister v1listers.SecretLister, serviceAccountLister v1listers.ServiceAccountLister, podLister v1listers.PodLister) serviceaccount.ServiceAccountTokenGetter {
  34. return clientGetter{c, secretLister, serviceAccountLister, podLister}
  35. }
  36. func (c clientGetter) GetServiceAccount(namespace, name string) (*v1.ServiceAccount, error) {
  37. if serviceAccount, err := c.serviceAccountLister.ServiceAccounts(namespace).Get(name); err == nil {
  38. return serviceAccount, nil
  39. }
  40. return c.client.CoreV1().ServiceAccounts(namespace).Get(context.TODO(), name, metav1.GetOptions{})
  41. }
  42. func (c clientGetter) GetPod(namespace, name string) (*v1.Pod, error) {
  43. if pod, err := c.podLister.Pods(namespace).Get(name); err == nil {
  44. return pod, nil
  45. }
  46. return c.client.CoreV1().Pods(namespace).Get(context.TODO(), name, metav1.GetOptions{})
  47. }
  48. func (c clientGetter) GetSecret(namespace, name string) (*v1.Secret, error) {
  49. if secret, err := c.secretLister.Secrets(namespace).Get(name); err == nil {
  50. return secret, nil
  51. }
  52. return c.client.CoreV1().Secrets(namespace).Get(context.TODO(), name, metav1.GetOptions{})
  53. }