-
Notifications
You must be signed in to change notification settings - Fork 98
Allow async auth providers #424
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
THanks James, I will take a look at this tomorrow. |
This adds support for async auth providers. There are many use cases for this, for example, authenticating with Kubernetes in AWS but outside of EKS, you need to make API calls to get a frequently rotated token. This allows that token to be looked up in a non blocking way. This also prepares the way for better support for reloading tokens in Kubernetes itself given that they are now frequently rotated.
8788023 to
89de2fb
Compare
Fixes doriordan#350 This implements token reloading for in cluster config. It's built on doriordan#424 so that needs to be reviewed/merged first. Also fixed a resource leak where the input streams for reading the files for in cluster config were not being closed. This was necessary to fix given that we're now frequently loading those streams.
|
LGTM, merged |
Fixes doriordan#350 This implements token reloading for in cluster config. It's built on doriordan#424 so that needs to be reviewed/merged first. Also fixed a resource leak where the input streams for reading the files for in cluster config were not being closed. This was necessary to fix given that we're now frequently loading those streams.
Fixes #350 This implements token reloading for in cluster config. It's built on #424 so that needs to be reviewed/merged first. Also fixed a resource leak where the input streams for reading the files for in cluster config were not being closed. This was necessary to fix given that we're now frequently loading those streams.
|
@jroper following this change compilation for 2.12 was broken because |
|
Ah good point. |
This adds support for async auth providers. There are many use cases for this, for example, authenticating with Kubernetes in AWS but outside of EKS, you need to make API calls to get a frequently rotated token. This allows that token to be looked up in a non blocking way. This also prepares the way for better support for reloading tokens in Kubernetes itself given that they are now frequently rotated.
Fixes #350 This implements token reloading for in cluster config. It's built on #424 so that needs to be reviewed/merged first. Also fixed a resource leak where the input streams for reading the files for in cluster config were not being closed. This was necessary to fix given that we're now frequently loading those streams.
This adds support for async auth providers. There are many use cases for this, for example, authenticating with Kubernetes in AWS but outside of EKS, you need to make API calls to get a frequently rotated token. This allows that token to be looked up in a non blocking way.
This also prepares the way for better support for reloading tokens in Kubernetes itself given that they are now frequently rotated.