-
Notifications
You must be signed in to change notification settings - Fork 468
/
types_viewerkubeconfigrequest.go
55 lines (46 loc) · 2.5 KB
/
types_viewerkubeconfigrequest.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
/*
Copyright 2023 SAP SE or an SAP affiliate company. All rights reserved. This file is licensed under the Apache Software License, v. 2 except as noted otherwise in the LICENSE file
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package v1alpha1
import (
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
)
// +genclient
// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
// ViewerKubeconfigRequest can be used to request a kubeconfig with viewer credentials (excluding Secrets)
// for a Shoot cluster.
type ViewerKubeconfigRequest struct {
metav1.TypeMeta `json:",inline"`
// Standard object metadata.
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Spec is the specification of the ViewerKubeconfigRequest.
Spec ViewerKubeconfigRequestSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
// Status is the status of the ViewerKubeconfigRequest.
Status ViewerKubeconfigRequestStatus `json:"status" protobuf:"bytes,3,opt,name=status"`
}
// ViewerKubeconfigRequestStatus is the status of the ViewerKubeconfigRequest containing
// the kubeconfig and expiration of the credential.
type ViewerKubeconfigRequestStatus struct {
// Kubeconfig contains the kubeconfig with viewer privileges (excluding Secrets) for the shoot cluster.
Kubeconfig []byte `json:"kubeconfig" protobuf:"bytes,1,opt,name=kubeconfig"`
// ExpirationTimestamp is the expiration timestamp of the returned credential.
ExpirationTimestamp metav1.Time `json:"expirationTimestamp" protobuf:"bytes,2,opt,name=expirationTimestamp"`
}
// ViewerKubeconfigRequestSpec contains the expiration time of the kubeconfig.
type ViewerKubeconfigRequestSpec struct {
// ExpirationSeconds is the requested validity duration of the credential. The
// credential issuer may return a credential with a different validity duration so a
// client needs to check the 'expirationTimestamp' field in a response.
// Defaults to 1 hour.
// +optional
ExpirationSeconds *int64 `json:"expirationSeconds,omitempty" protobuf:"varint,1,opt,name=expirationSeconds"`
}