kubernetes/staging/src/k8s.io/apiserver/pkg/server/options/authentication.go

// DefaultAuthWebhookRetryBackoff is the default backoff parameters for
// both authentication and authorization webhook used by the apiserver.
func DefaultAuthWebhookRetryBackoff() *wait.Backoff { … }

type RequestHeaderAuthenticationOptions …

func (s *RequestHeaderAuthenticationOptions) Validate() []error { … }

func checkForWhiteSpaceOnly(flag string, headerNames ...string) error { … }

func caseInsensitiveHas(headers []string, header string) bool { … }

func (s *RequestHeaderAuthenticationOptions) AddFlags(fs *pflag.FlagSet) { … }

// ToAuthenticationRequestHeaderConfig returns a RequestHeaderConfig config object for these options
// if necessary, nil otherwise.
func (s *RequestHeaderAuthenticationOptions) ToAuthenticationRequestHeaderConfig() (*authenticatorfactory.RequestHeaderConfig, error) { … }

type ClientCertAuthenticationOptions …

// GetClientVerifyOptionFn provides verify options for your authenticator while respecting the preferred order of verifiers.
func (s *ClientCertAuthenticationOptions) GetClientCAContentProvider() (dynamiccertificates.CAContentProvider, error) { … }

func (s *ClientCertAuthenticationOptions) AddFlags(fs *pflag.FlagSet) { … }

type DelegatingAuthenticationOptions …

func NewDelegatingAuthenticationOptions() *DelegatingAuthenticationOptions { … }

// WithCustomRetryBackoff sets the custom backoff parameters for the authentication webhook retry logic.
func (s *DelegatingAuthenticationOptions) WithCustomRetryBackoff(backoff wait.Backoff) { … }

// WithRequestTimeout sets the given timeout for requests made by the authentication webhook client.
func (s *DelegatingAuthenticationOptions) WithRequestTimeout(timeout time.Duration) { … }

// WithCustomRoundTripper allows for specifying a middleware function for custom HTTP behaviour for the authentication webhook client.
func (s *DelegatingAuthenticationOptions) WithCustomRoundTripper(rt transport.WrapperFunc) { … }

func (s *DelegatingAuthenticationOptions) Validate() []error { … }

func (s *DelegatingAuthenticationOptions) AddFlags(fs *pflag.FlagSet) { … }

func (s *DelegatingAuthenticationOptions) ApplyTo(authenticationInfo *server.AuthenticationInfo, servingInfo *server.SecureServingInfo, openAPIConfig *openapicommon.Config) error { … }

const authenticationConfigMapNamespace …

const authenticationConfigMapName …

func (s *DelegatingAuthenticationOptions) createRequestHeaderConfig(client kubernetes.Interface) (*authenticatorfactory.RequestHeaderConfig, error) { … }

// getClient returns a Kubernetes clientset. If s.RemoteKubeConfigFileOptional is true, nil will be returned
// if no kubeconfig is specified by the user and the in-cluster config is not found.
func (s *DelegatingAuthenticationOptions) getClient() (kubernetes.Interface, error) { … }