mirror of https://github.com/k3s-io/k3s
46 lines
1.9 KiB
Go
46 lines
1.9 KiB
Go
|
package kubeadm
|
||
|
|
|
||
|
|
import (
|
||
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
||
|
|
)
|
||
|
|
|
||
|
|
// kubeadm bootstrap token types cribbed from:
|
||
|
|
// https://github.com/kubernetes/kubernetes/blob/v1.25.4/cmd/kubeadm/app/apis/bootstraptoken/v1/types.go
|
||
|
|
// Copying these instead of importing from kubeadm saves about 4mb of binary size.
|
||
|
|
|
||
|
|
// BootstrapToken describes one bootstrap token, stored as a Secret in the cluster
|
||
|
|
type BootstrapToken struct {
|
||
|
|
// Token is used for establishing bidirectional trust between nodes and control-planes.
|
||
|
|
// Used for joining nodes in the cluster.
|
||
|
|
Token *BootstrapTokenString `json:"token" datapolicy:"token"`
|
||
|
|
// Description sets a human-friendly message why this token exists and what it's used
|
||
|
|
// for, so other administrators can know its purpose.
|
||
|
|
// +optional
|
||
|
|
Description string `json:"description,omitempty"`
|
||
|
|
// TTL defines the time to live for this token. Defaults to 24h.
|
||
|
|
// Expires and TTL are mutually exclusive.
|
||
|
|
// +optional
|
||
|
|
TTL *metav1.Duration `json:"ttl,omitempty"`
|
||
|
|
// Expires specifies the timestamp when this token expires. Defaults to being set
|
||
|
|
// dynamically at runtime based on the TTL. Expires and TTL are mutually exclusive.
|
||
|
|
// +optional
|
||
|
|
Expires *metav1.Time `json:"expires,omitempty"`
|
||
|
|
// Usages describes the ways in which this token can be used. Can by default be used
|
||
|
|
// for establishing bidirectional trust, but that can be changed here.
|
||
|
|
// +optional
|
||
|
|
Usages []string `json:"usages,omitempty"`
|
||
|
|
// Groups specifies the extra groups that this token will authenticate as when/if
|
||
|
|
// used for authentication
|
||
|
|
// +optional
|
||
|
|
Groups []string `json:"groups,omitempty"`
|
||
|
|
}
|
||
|
|
|
||
|
|
// BootstrapTokenString is a token of the format abcdef.abcdef0123456789 that is used
|
||
|
|
// for both validation of the identity of the API server from a joining node's point
|
||
|
|
// of view and as an authentication method for the node. This token is and should be
|
||
|
|
// short-lived.
|
||
|
|
type BootstrapTokenString struct {
|
||
|
|
ID string `json:"-"`
|
||
|
|
Secret string `json:"-" datapolicy:"token"`
|
||
|
|
}
|