all repos — janny @ 037e9700cfe4f2c8f310ed9652a241d3c7c9d5cf

clean up Kubernetes resources after a set TTL

janny/auth.py (view raw)

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 
import requests
import logging
import os

logging.basicConfig(level=logging.INFO)


def kube_auth():
    session = requests.Session()

    # We're in-cluster
    if not os.path.exists(os.path.expanduser("~/.kube/config")):
        with open("/var/run/secrets/kubernetes.io/serviceaccount/token") as f:
            token = f.read()
        session.verify = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
        session.headers.update({"Authorization": f"Bearer {token}"})
        logging.info("Authenticated with the API server")
    else:
        logging.info("Not in-cluster, continuing as is")

    return session

SESSION = kube_auth()