use of com.marcnuri.yakc.config.Configuration in project yakc by manusa.
the class AuthIT method performTokenAuthInNewClient.
@Test
void performTokenAuthInNewClient() throws IOException {
// Given
final Secret secret = retrieveSecretForServiceAccount();
final Configuration configuration = Configuration.builder().server(KC.getConfiguration().getServer()).certificateAuthorityData(secret.getData().get("ca.crt")).token(() -> secret.getData().get("token")).build();
// When
final Node node = new KubernetesClient(configuration).create(CoreV1Api.class).listNode().stream().findFirst().orElse(null);
// Then
assertThat(node).isNotNull().hasFieldOrPropertyWithValue("metadata.name", nodeName);
}
use of com.marcnuri.yakc.config.Configuration in project yakc by manusa.
the class AuthIT method retrieveSecretForServiceAccount.
private Secret retrieveSecretForServiceAccount() throws IOException {
final ServiceAccount sa = KC.create(CoreV1Api.class).listNamespacedServiceAccount(NAMESPACE).stream().findFirst().orElseThrow(() -> new AssertionError("No Service Account found"));
final String secretName = sa.getSecrets() == null ? null : sa.getSecrets().stream().findFirst().map(ObjectReference::getName).orElse(null);
if (secretName != null) {
return KC.create(CoreV1Api.class).listNamespacedSecret(NAMESPACE).stream().filter(s -> s.getType().equals("kubernetes.io/service-account-token")).filter(s -> s.getMetadata().getName().equals(secretName)).findAny().orElseThrow(() -> new AssertionError(String.format("Secret %s doesn't exist", secretName)));
} else {
// https://kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secrets
final Secret serviceAccountTokenSecret = Secret.builder().metadata(ObjectMeta.builder().name(sa.getMetadata().getName() + "-token").putInAnnotations("kubernetes.io/service-account.name", sa.getMetadata().getName()).build()).type("kubernetes.io/service-account-token").putInStringData("token", "my-secret-token").build();
return KC.create(CoreV1Api.class).createNamespacedSecret(NAMESPACE, serviceAccountTokenSecret).get();
}
}
Aggregations