webhook: support exec auth plugin

mikedanese · mikedanese · commit 8b45296661de · 2019-04-22T19:25:13.000-07:00
This allows webhook static kubeconfig to use an exec auth plugin to configure authentication. https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#authenticate-apiservers
diff --git a/staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go b/staging/src/k8s.io/apiserver/pkg/util/webhook/authentication.go
@@ -196,6 +196,9 @@ func restConfigFromKubeconfig(configAuthInfo *clientcmdapi.AuthInfo) (*rest.Conf
 		config.Username = configAuthInfo.Username
 		config.Password = configAuthInfo.Password
 	}
+	if configAuthInfo.Exec != nil {
+		config.ExecProvider = configAuthInfo.Exec.DeepCopy()
+	}
 	if configAuthInfo.AuthProvider != nil {
 		return nil, fmt.Errorf("auth provider not supported")
 	}

Original file line number	Diff line number	Diff line change
`@@ -196,6 +196,9 @@ func restConfigFromKubeconfig(configAuthInfo clientcmdapi.AuthInfo) (rest.Conf`
`196`	`196`	`config.Username = configAuthInfo.Username`
`197`	`197`	`config.Password = configAuthInfo.Password`
`198`	`198`	`}`
	`199`	`+ if configAuthInfo.Exec != nil {`
	`200`	`+ config.ExecProvider = configAuthInfo.Exec.DeepCopy()`
	`201`	`+ }`
`199`	`202`	`if configAuthInfo.AuthProvider != nil {`
`200`	`203`	`return nil, fmt.Errorf("auth provider not supported")`
`201`	`204`	`}`