all repos — janny @ a5e17725e7d2ea9c0d165c5c9e96d5da10f782c0

clean up Kubernetes resources after a set TTL

janny/auth.py (view raw)

 1
 2
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 
import requests
import os

from janny.config import logger


def kube_auth():
    session = requests.Session()

    # We're in-cluster
    if not os.path.exists(os.path.expanduser("~/.kube/config")):
        with open("/var/run/secrets/kubernetes.io/serviceaccount/token") as f:
            token = f.read()
        session.verify = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
        session.headers.update({"Authorization": f"Bearer {token}"})
        logger.info("Authenticated with the API server")
    else:
        logger.info("Not in-cluster, continuing as is")

    return session


SESSION = kube_auth()