Class KubernetesServiceAccountTokenFile

java.lang.Object

org.springframework.vault.authentication.ResourceCredentialSupplier

org.springframework.vault.authentication.KubernetesServiceAccountTokenFile

All Implemented Interfaces:

Supplier<String>, CredentialSupplier, KubernetesJwtSupplier

public class KubernetesServiceAccountTokenFile
extends ResourceCredentialSupplier
implements KubernetesJwtSupplier

Mechanism to retrieve a Kubernetes service account token.

A file containing a token for a pod's service account is automatically mounted at /var/run/secrets/kubernetes.io/serviceaccount/token.

Since:

2.0

Author:

Michal Budzyn, Mark Paluch

See Also:

• KubernetesJwtSupplier

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE	Default path to the service account token file.

Constructor Summary

Constructors

Constructor	Description
KubernetesServiceAccountTokenFile()	Create a new KubernetesServiceAccountTokenFile pointing to the DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE.
KubernetesServiceAccountTokenFile(File file)	Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a File handle.
KubernetesServiceAccountTokenFile(String path)	Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a path.
KubernetesServiceAccountTokenFile(Resource resource)	Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a Resource handle.

Method Summary

Methods inherited from class ResourceCredentialSupplier

get

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface CredentialSupplier

cached, get

Field Details

DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE

public static final String DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE

Default path to the service account token file.

See Also:

• Constant Field Values

Constructor Details

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile()

Create a new KubernetesServiceAccountTokenFile pointing to the DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE. Construction fails with an exception if the file does not exist.

Throws:

IllegalArgumentException - if the DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE does not exist.

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile(String path)

Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a path.

Parameters:

path - path to the service account token file.

Throws:

IllegalArgumentException - if thepath does not exist.

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile(File file)

Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a File handle.

Parameters:

file - path to the service account token file.

Throws:

IllegalArgumentException - if thepath does not exist.

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile(Resource resource)

Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a Resource handle.

Parameters:

resource - resource pointing to the service account token file.

Throws:

IllegalArgumentException - if thepath does not exist.