kubernetes/test/images/agnhost/openidmetadata/openidmetadata.go

var CmdTestServiceAccountIssuerDiscovery …

var tokenPath …

var audience …

func init() { … }

func main(cmd *cobra.Command, args []string) { … }

func validate(ctx context.Context, raw string) error { … }

type kubeName …

type kubeClaims …

type claims …

func (k *claims) String() string { … }

func gettoken() (string, error) { … }

func withExternalOAuth2Client(ctx context.Context) (context.Context, error) { … }

func withInClusterOauth2Client(ctx context.Context) (context.Context, error) { … }

// DNS can be available sometime after the container starts due to the way
// networking is set up for Windows nodes with dockershim as the container runtime.
// In this case, we should make sure we are able to resolve the issuer before
// invoking oidc.NewProvider.
// See https://github.com/kubernetes/kubernetes/issues/99470 for more details.
func ensureWindowsDNSAvailability(issuer string) error { … }