# Functions
NewPodMutator returns a pod mutation handler.
ReportRequest reports the request duration for the given namespace.
# Constants
Environment variables injected in the pod.
Environment variables injected in the pod.
#nosec.
Environment variables injected in the pod.
ClientIDAnnotation represents the clientID to be used with pod.
DefaultAudience is the audience added to the service account token audience This value is to be consistent with other token exchange flows in AAD and has no impact on the actual token exchange flow.
DefaultProxySidecarPort is the default port for proxy sidecar.
DefaultServiceAccountTokenExpiration is the default service account token expiration in seconds This is the Kubernetes default value for projected service account token.
InjectProxySidecarAnnotation represents the annotation to be used to inject proxy sidecar into the pod.
MaxServiceAccountTokenExpiration is the maximum service account token expiration in seconds.
MinServiceAccountTokenExpiration is the minimum service account token expiration in seconds.
ProxyInitContainerName is the name of the init container that will be used to inject proxy sidecar.
ProxyInitImageName is the name of the image that will be used to inject proxy init container.
ProxyPortEnvVar is the environment variable name for the proxy port.
ProxySidecarContainerName is the name of the container that will be used to inject proxy sidecar.
ProxySidecarImageName is the name of the image that will be used to inject proxy sidecar.
ProxySidecarPortAnnotation represents the annotation to be used to specify the port for proxy sidecar.
#nosec.
SkipContainersAnnotation represents list of containers to skip adding projected service account token volume.
TenantIDAnnotation represent the tenantID to be used with pod.
#nosec.
Environment variables injected in the pod.
UseWorkloadIdentityLabel represents the service account is to be used for workload identity.
# Variables
ProxyImageRegistry is the image registry for the proxy init and sidecar.
ProxyImageVersion is the image version of the proxy init and sidecar.