authentication.md

Packages:

• authentication.gardener.cloud/v1alpha1

authentication.gardener.cloud/v1alpha1

Resource Types:

• AdminKubeconfigRequest
• ViewerKubeconfigRequest

AdminKubeconfigRequest

AdminKubeconfigRequest can be used to request a kubeconfig with admin credentials for a Shoot cluster.

Field	Description
metadata ObjectMeta	Refer to the Kubernetes API documentation for the fields of the metadata field.
spec AdminKubeconfigRequestSpec	Spec is the specification of the AdminKubeconfigRequest.
status AdminKubeconfigRequestStatus	Status is the status of the AdminKubeconfigRequest.

AdminKubeconfigRequestSpec

(Appears on:AdminKubeconfigRequest)

AdminKubeconfigRequestSpec contains the expiration time of the kubeconfig.

Field	Description
expirationSeconds integer	(Optional) ExpirationSeconds is the requested validity duration of the credential. The credential issuer may return a credential with a different validity duration so a client needs to check the 'expirationTimestamp' field in a response. Defaults to 1 hour.

AdminKubeconfigRequestStatus

(Appears on:AdminKubeconfigRequest)

AdminKubeconfigRequestStatus is the status of the AdminKubeconfigRequest containing the kubeconfig and expiration of the credential.

Field	Description
kubeconfig integer array	Kubeconfig contains the kubeconfig with cluster-admin privileges for the shoot cluster.
expirationTimestamp Time	ExpirationTimestamp is the expiration timestamp of the returned credential.

ViewerKubeconfigRequest

ViewerKubeconfigRequest can be used to request a kubeconfig with viewer credentials (excluding Secrets) for a Shoot cluster.

Field	Description
metadata ObjectMeta	Refer to the Kubernetes API documentation for the fields of the metadata field.
spec ViewerKubeconfigRequestSpec	Spec is the specification of the ViewerKubeconfigRequest.
status ViewerKubeconfigRequestStatus	Status is the status of the ViewerKubeconfigRequest.

ViewerKubeconfigRequestSpec

(Appears on:ViewerKubeconfigRequest)

ViewerKubeconfigRequestSpec contains the expiration time of the kubeconfig.

Field	Description
expirationSeconds integer	(Optional) ExpirationSeconds is the requested validity duration of the credential. The credential issuer may return a credential with a different validity duration so a client needs to check the 'expirationTimestamp' field in a response. Defaults to 1 hour.

ViewerKubeconfigRequestStatus

(Appears on:ViewerKubeconfigRequest)

ViewerKubeconfigRequestStatus is the status of the ViewerKubeconfigRequest containing the kubeconfig and expiration of the credential.

Field	Description
kubeconfig integer array	Kubeconfig contains the kubeconfig with viewer privileges (excluding Secrets) for the shoot cluster.
expirationTimestamp Time	ExpirationTimestamp is the expiration timestamp of the returned credential.