ClientCertificate is the path to a client cert file for TLS.

ClientCertificateData contains PEM-encoded data from a client cert file for TLS. Overrides ClientCertificate

ClientKey is the path to a client key file for TLS.

ClientKeyData contains PEM-encoded data from a client key file for TLS. Overrides ClientKey

Token is the bearer token for authentication to the kubernetes cluster.

TokenFile is a pointer to a file that contains a bearer token (as described above). If both Token and TokenFile are present, Token takes precedence.

Impersonate is the username to impersonate. The name matches the flag.

ImpersonateUID is the uid to impersonate.

ImpersonateGroups is the groups to impersonate.

ImpersonateUserExtra contains additional information for impersonated user.

Username is the username for basic authentication to the kubernetes cluster.

Password is the password for basic authentication to the kubernetes cluster.

AuthProvider specifies a custom authentication plugin for the kubernetes cluster.

Exec specifies a custom exec-based authentication plugin for the kubernetes cluster.

Extensions holds additional information. This is useful for extenders so that reads and writes don’t clobber unknown fields

Server is the address of the kubernetes cluster (https://hostname:port).

TLSServerName is used to check server certificate. If TLSServerName is empty, the hostname used to contact the server is used.

InsecureSkipTLSVerify skips the validity check for the server’s certificate. This will make your HTTPS connections insecure.

CertificateAuthority is the path to a cert file for the certificate authority.

CertificateAuthorityData contains PEM-encoded certificate authority certificates. Overrides CertificateAuthority

ProxyURL is the URL to the proxy to be used for all requests made by this client. URLs with “http”, “https”, and “socks5” schemes are supported. If this configuration is not provided or the empty string, the client attempts to construct a proxy configuration from http_proxy and https_proxy environment variables. If these environment variables are not set, the client does not attempt to proxy requests.

socks5 proxying does not currently support spdy streaming endpoints (exec, attach, port forward).

DisableCompression allows client to opt-out of response compression for all requests to the server. This is useful to speed up requests (specifically lists) when client-server network bandwidth is ample, by saving time on compression (server-side) and decompression (client-side): https://github.com/kubernetes/kubernetes/issues/112296.

Extensions holds additional information. This is useful for extenders so that reads and writes don’t clobber unknown fields

Cluster is the name of the cluster for this context

AuthInfo is the name of the authInfo for this context

Namespace is the default namespace to use on unspecified requests

Extensions holds additional information. This is useful for extenders so that reads and writes don’t clobber unknown fields

Command to execute.

Arguments to pass to the command when executing it.

Env defines additional environment variables to expose to the process. These are unioned with the host’s environment, as well as variables client-go uses to pass argument to the plugin.

Preferred input version of the ExecInfo. The returned ExecCredentials MUST use the same encoding version as the input.

This text is shown to the user when the executable doesn’t seem to be present. For example, brew install foo-cli might be a good InstallHint for foo-cli on Mac OS systems.

ProvideClusterInfo determines whether or not to provide cluster information, which could potentially contain very large CA data, to this exec plugin as a part of the KUBERNETES_EXEC_INFO environment variable. By default, it is set to false. Package k8s.io/client-go/tools/auth/exec provides helper methods for reading this environment variable.

InteractiveMode determines this plugin’s relationship with standard input. Valid values are “Never” (this exec plugin never uses standard input), “IfAvailable” (this exec plugin wants to use standard input if it is available), or “Always” (this exec plugin requires standard input to function). See ExecInteractiveMode values for more details.

If APIVersion is client.authentication.k8s.io/v1alpha1 or client.authentication.k8s.io/v1beta1, then this field is optional and defaults to “IfAvailable” when unset. Otherwise, this field is required.

Name is the nickname for this AuthInfo

AuthInfo holds the auth information

Name is the nickname for this Cluster

Cluster holds the cluster information

Name is the nickname for this Context

Context holds the context information

Name is the nickname for this Extension

Extension holds the extension information

Extensions holds additional information. This is useful for extenders so that reads and writes don’t clobber unknown fields