NewDelegatingAuthenticator creates an authenticator compatible with the kubelet's needs.

NewOIDCAuthenticator returns OIDC authenticator wrapped as a CancelableAuthRequest instance.

AuthnConfig holds all configurations related to authentication options.

AuthnHeaderConfig contains authentication header settings which enable more information about the user identity to be sent to the upstream.

OIDCConfig represents configuration used for JWT request authentication.

X509Config holds public client certificate used for authentication requests if specified.

Extends authenticator.Request interface with Cancel() function used to stop underlying authenticator instance once it's not needed anymore.