Search in sources :

Example 1 with ListNamespacedSecret

use of com.marcnuri.yakc.api.core.v1.CoreV1Api.ListNamespacedSecret in project yakc by manusa.

the class AuthIT method retrieveSecretForServiceAccount.

private Secret retrieveSecretForServiceAccount() throws IOException {
    final ServiceAccount sa = KC.create(CoreV1Api.class).listNamespacedServiceAccount(NAMESPACE).stream().findFirst().orElseThrow(() -> new AssertionError("No Service Account found"));
    final String secretName = sa.getSecrets() == null ? null : sa.getSecrets().stream().findFirst().map(ObjectReference::getName).orElse(null);
    if (secretName != null) {
        return KC.create(CoreV1Api.class).listNamespacedSecret(NAMESPACE).stream().filter(s -> s.getType().equals("kubernetes.io/service-account-token")).filter(s -> s.getMetadata().getName().equals(secretName)).findAny().orElseThrow(() -> new AssertionError(String.format("Secret %s doesn't exist", secretName)));
    } else {
        // https://kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secrets
        final Secret serviceAccountTokenSecret = Secret.builder().metadata(ObjectMeta.builder().name(sa.getMetadata().getName() + "-token").putInAnnotations("kubernetes.io/service-account.name", sa.getMetadata().getName()).build()).type("kubernetes.io/service-account-token").putInStringData("token", "my-secret-token").build();
        return KC.create(CoreV1Api.class).createNamespacedSecret(NAMESPACE, serviceAccountTokenSecret).get();
    }
}
Also used : Node(com.marcnuri.yakc.model.io.k8s.api.core.v1.Node) KC(com.marcnuri.yakc.KubernetesClientExtension.KC) Assertions.assertThat(org.assertj.core.api.Assertions.assertThat) ServiceAccount(com.marcnuri.yakc.model.io.k8s.api.core.v1.ServiceAccount) IOException(java.io.IOException) Secret(com.marcnuri.yakc.model.io.k8s.api.core.v1.Secret) Test(org.junit.jupiter.api.Test) CoreV1Api(com.marcnuri.yakc.api.core.v1.CoreV1Api) ObjectMeta(com.marcnuri.yakc.model.io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta) Configuration(com.marcnuri.yakc.config.Configuration) ExtendWith(org.junit.jupiter.api.extension.ExtendWith) BeforeAll(org.junit.jupiter.api.BeforeAll) ObjectReference(com.marcnuri.yakc.model.io.k8s.api.core.v1.ObjectReference) Secret(com.marcnuri.yakc.model.io.k8s.api.core.v1.Secret) ServiceAccount(com.marcnuri.yakc.model.io.k8s.api.core.v1.ServiceAccount) ObjectReference(com.marcnuri.yakc.model.io.k8s.api.core.v1.ObjectReference)

Example 2 with ListNamespacedSecret

use of com.marcnuri.yakc.api.core.v1.CoreV1Api.ListNamespacedSecret in project yakc by manusa.

the class SecretService method watch.

@Override
public Observable<WatchEvent<Secret>> watch() throws IOException {
    final CoreV1Api api = kubernetesClient.create(CoreV1Api.class);
    return tryWithFallback(() -> {
        api.listSecretForAllNamespaces(new ListSecretForAllNamespaces().limit(1)).get();
        return api.listSecretForAllNamespaces().watch();
    }, () -> {
        final String ns = kubernetesClient.getConfiguration().getNamespace();
        api.listNamespacedSecret(ns, new ListNamespacedSecret().limit(1)).get();
        return api.listNamespacedSecret(ns).watch();
    });
}
Also used : ListNamespacedSecret(com.marcnuri.yakc.api.core.v1.CoreV1Api.ListNamespacedSecret) ListSecretForAllNamespaces(com.marcnuri.yakc.api.core.v1.CoreV1Api.ListSecretForAllNamespaces) CoreV1Api(com.marcnuri.yakc.api.core.v1.CoreV1Api)

Aggregations

CoreV1Api (com.marcnuri.yakc.api.core.v1.CoreV1Api)2 KC (com.marcnuri.yakc.KubernetesClientExtension.KC)1 ListNamespacedSecret (com.marcnuri.yakc.api.core.v1.CoreV1Api.ListNamespacedSecret)1 ListSecretForAllNamespaces (com.marcnuri.yakc.api.core.v1.CoreV1Api.ListSecretForAllNamespaces)1 Configuration (com.marcnuri.yakc.config.Configuration)1 Node (com.marcnuri.yakc.model.io.k8s.api.core.v1.Node)1 ObjectReference (com.marcnuri.yakc.model.io.k8s.api.core.v1.ObjectReference)1 Secret (com.marcnuri.yakc.model.io.k8s.api.core.v1.Secret)1 ServiceAccount (com.marcnuri.yakc.model.io.k8s.api.core.v1.ServiceAccount)1 ObjectMeta (com.marcnuri.yakc.model.io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta)1 IOException (java.io.IOException)1 Assertions.assertThat (org.assertj.core.api.Assertions.assertThat)1 BeforeAll (org.junit.jupiter.api.BeforeAll)1 Test (org.junit.jupiter.api.Test)1 ExtendWith (org.junit.jupiter.api.extension.ExtendWith)1