Package org.springframework.vault.authentication

Class KubernetesServiceAccountTokenFile

java.lang.Object

org.springframework.vault.authentication.ResourceCredentialSupplier

org.springframework.vault.authentication.KubernetesServiceAccountTokenFile

All Implemented Interfaces:

Supplier<String>, CredentialSupplier, KubernetesJwtSupplier

public class KubernetesServiceAccountTokenFile
extends ResourceCredentialSupplier
implements KubernetesJwtSupplier

Mechanism to retrieve a Kubernetes service account token.

A file containing a token for a pod's service account is automatically mounted at /var/run/secrets/kubernetes.io/serviceaccount/token.

Since:

2.0

Author:

Michal Budzyn, Mark Paluch

See Also:

• KubernetesJwtSupplier

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE	Default path to the service account token file.

Constructor Summary

Constructors

Constructor	Description
KubernetesServiceAccountTokenFile()	Create a new KubernetesServiceAccountTokenFile pointing to the DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE.
KubernetesServiceAccountTokenFile(File file)	Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a File handle.
KubernetesServiceAccountTokenFile(String path)	Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a path.
KubernetesServiceAccountTokenFile(Resource resource)	Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a Resource handle.

Method Summary

Methods inherited from class org.springframework.vault.authentication.ResourceCredentialSupplier

get

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.springframework.vault.authentication.CredentialSupplier

cached, get

Field Details

DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE

public static final String DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE

Default path to the service account token file.

See Also:

• Constant Field Values

Constructor Details

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile()

Create a new KubernetesServiceAccountTokenFile pointing to the DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE. Construction fails with an exception if the file does not exist.

Throws:

IllegalArgumentException - if the DEFAULT_KUBERNETES_SERVICE_ACCOUNT_TOKEN_FILE does not exist.

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile(String path)

Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a path.

Parameters:

path - path to the service account token file.

Throws:

IllegalArgumentException - if thepath does not exist.

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile(File file)

Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a File handle.

Parameters:

file - path to the service account token file.

Throws:

IllegalArgumentException - if thepath does not exist.

KubernetesServiceAccountTokenFile

public KubernetesServiceAccountTokenFile(Resource resource)

Create a new KubernetesServiceAccountTokenFile KubernetesServiceAccountTokenFile from a Resource handle.

Parameters:

resource - resource pointing to the service account token file.

Throws:

IllegalArgumentException - if thepath does not exist.