Properties
Protected _federationClient
Protected _sessionKeySupplier
Protected federationClient
Protected sessionKeySupplier
Static ClaimKeys
ClaimKeys: ClaimsKey = class ClaimsKey {/*** COMPARTMENT_ID is the claim name that the RPST holds for the resource compartment.* This can be passed to {@link #getStringClaim} to retrieve the resource's compartment OCID.*/public static COMPARTMENT_ID_CLAIM_KEY = "res_compartment";/*** TENANT_ID_CLAIM_KEY is the claim name that the RPST holds for the resource tenancy.* This can be passed to {@link #getStringClaim} to retrieve the resource's tenancy OCID.*/public static TENANT_ID_CLAIM_KEY = "res_tenant";}
Static DEFAULT_DEFAULT_KUBERNETES_SERVICE_ACCOUNT_CERT_PATH
DEFAULT_DEFAULT_KUBERNETES_SERVICE_ACCOUNT_CERT_PATH: string = "/var/run/secrets/kubernetes.io/serviceaccount/token"
Static DEFAULT_KUBERNETES_SERVICE_ACCOUNT_CERT_PATH
DEFAULT_KUBERNETES_SERVICE_ACCOUNT_CERT_PATH: string = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
Static KUBERNETES_SERVICE_HOST_ENV_VAR_NAME
KUBERNETES_SERVICE_HOST_ENV_VAR_NAME: string = "KUBERNETES_SERVICE_HOST"
Static KUBERNETES_SERVICE_PORT_PROXYMUX_ENV_VAR_NAME
KUBERNETES_SERVICE_PORT_PROXYMUX_ENV_VAR_NAME: string = "KUBERNETES_SERVICE_PORT_PROXYMUX"
Static OkeWorkloadIdentityAuthenticationDetailsProviderBuilder
OkeWorkloadIdentityAuthenticationDetailsProviderBuilder: OkeWorkloadIdentityAuthenticationDetailsProviderBuilder = class OkeWorkloadIdentityAuthenticationDetailsProviderBuilder {kubernetesServiceAccountCertPath: string;kubernetesServiceAccountTokenPath: string;constructor(customKubernetesServiceAccountCertPath?: string,customKubernetesServiceAccountTokenPath?: string) {this.kubernetesServiceAccountCertPath =customKubernetesServiceAccountCertPath ||OkeWorkloadIdentityAuthenticationDetailsProvider.DEFAULT_KUBERNETES_SERVICE_ACCOUNT_CERT_PATH;this.kubernetesServiceAccountTokenPath =customKubernetesServiceAccountTokenPath ||OkeWorkloadIdentityAuthenticationDetailsProvider.DEFAULT_DEFAULT_KUBERNETES_SERVICE_ACCOUNT_CERT_PATH;}public build(): OkeWorkloadIdentityAuthenticationDetailsProvider {let federationClient: FederationClient;let sessionKeySupplier: SessionKeySupplier;const kubernetesServiceHost =process.env[OkeWorkloadIdentityAuthenticationDetailsProvider.KUBERNETES_SERVICE_HOST_ENV_VAR_NAME];if (!kubernetesServiceHost) {throw Error(`${OkeWorkloadIdentityAuthenticationDetailsProvider.KUBERNETES_SERVICE_HOST_ENV_VAR_NAME} environment variable is missing. ` +OKE_WORKLOAD_IDENTITY_DEBUG_INFORMATION_LOG);}const kubernetesServiceProxymuxPort =process.env[OkeWorkloadIdentityAuthenticationDetailsProvider.KUBERNETES_SERVICE_PORT_PROXYMUX_ENV_VAR_NAME];if (!kubernetesServiceProxymuxPort) {throw Error(`${OkeWorkloadIdentityAuthenticationDetailsProvider.KUBERNETES_SERVICE_PORT_PROXYMUX_ENV_VAR_NAME} environment variable is missing. ` +OKE_WORKLOAD_IDENTITY_DEBUG_INFORMATION_LOG);}let kubernetesServiceAccountCert;try {kubernetesServiceAccountCert = loadFromFile(this.kubernetesServiceAccountCertPath);} catch (e) {throw Error(`Failed to read ${this.kubernetesServiceAccountCertPath}. ` +OKE_WORKLOAD_IDENTITY_DEBUG_INFORMATION_LOG);}let kubernetesServiceAccountToken;try {kubernetesServiceAccountToken = loadFromFile(this.kubernetesServiceAccountTokenPath);} catch (e) {throw Error(`Failed to read ${this.kubernetesServiceAccountTokenPath}. ` +OKE_WORKLOAD_IDENTITY_DEBUG_INFORMATION_LOG);}// Initialize everythingsessionKeySupplier = new SessionKeySupplierImpl();federationClient = new X509FederationClientForOkeWorkloadIdentity(`https://${kubernetesServiceHost}:${kubernetesServiceProxymuxPort}/resourcePrincipalSessionTokens`,kubernetesServiceAccountToken,kubernetesServiceAccountCert,sessionKeySupplier);return new OkeWorkloadIdentityAuthenticationDetailsProvider(federationClient,sessionKeySupplier);}}
Builder for OkeWorkloadIdentityAuthenticationDetailsProvider