djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

internal/concierge/impersonator: use kubeconfig from kubeclient

Browse Source 
Signed-off-by: Andrew Keesler <akeesler@vmware.com>
This commit is contained in:
Andrew Keesler 2021-02-09 15:28:56 -05:00
parent dfcc2a1eb8
commit 8697488126
No known key found for this signature in database
GPG Key ID: 27CE0444346F9413
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
internal/concierge/impersonator/impersonator.go
View File

@ -20,6 +20,7 @@ import (
"go.pinniped.dev/generated/1.20/apis/concierge/login" "go.pinniped.dev/generated/1.20/apis/concierge/login"
loginv1alpha1 "go.pinniped.dev/generated/1.20/apis/concierge/login/v1alpha1" loginv1alpha1 "go.pinniped.dev/generated/1.20/apis/concierge/login/v1alpha1"
"go.pinniped.dev/internal/controller/authenticator/authncache" "go.pinniped.dev/internal/controller/authenticator/authncache"
"go.pinniped.dev/internal/kubeclient"
) )
// allowedHeaders are the set of HTTP headers that are allowed to be forwarded through the impersonation proxy. // allowedHeaders are the set of HTTP headers that are allowed to be forwarded through the impersonation proxy.
@ -39,7 +40,13 @@ type Proxy struct {
} }
func New(cache *authncache.Cache, log logr.Logger) (*Proxy, error) { func New(cache *authncache.Cache, log logr.Logger) (*Proxy, error) {
return newInternal(cache, log, rest.InClusterConfig) return newInternal(cache, log, func() (*rest.Config, error) {
client, err := kubeclient.New()
if err != nil {
return nil, err
}
return client.JSONConfig, nil
})
} }
func newInternal(cache *authncache.Cache, log logr.Logger, getConfig func() (*rest.Config, error)) (*Proxy, error) { func newInternal(cache *authncache.Cache, log logr.Logger, getConfig func() (*rest.Config, error)) (*Proxy, error) {