NewForwarder returns new instance of Kubernetes request forwarding proxy.

NewSpdyRoundTripperWithDialer creates a new SpdyRoundTripper that will use the specified tlsConfig.

NewTLSServer returns new unstarted TLS server.

NewWebsocketRoundTripperWithDialer creates a new WebsocketRoundTripper that will dial and upgrade connection, copying impersonation setup specified in the config.

SetupTestContext creates a kube service with clusters configured.

WithIdentityRoute allows the user to reset the identity's RouteToCluster and KubernetesCluster fields to empty strings.

WithMFAVerified sets the MFAVerified identity field,.

WithMultiplexerIgnoreSelfConnections is used for tests, it makes multiplexer ignore the fact that it's self connection (coming from same IP as the listening address) when deciding if it should drop connection with missing required PROXY header.

WithResourceAccessRequests adds resource access requests to the identity.

DefaultStreamCreationTimeout.

Command to run for remote command execution.

Enable stderr for remote command execution.

Enable stdin for remote command execution.

Enable stdout for remote command execution.

Enable TTY for remote command execution.

ImpersonateGroupHeader is K8s impersonation header for user.

ImpersonateHeaderPrefix is K8s impersonation prefix for impersonation feature: https://kubernetes.io/docs/reference/access-authn-authz/authentication/#user-impersonation.

ImpersonateUserHeader is impersonation header for users.

ImpersonationRequestDeniedMessage is access denied message for impersonation.

KubeService is a Teleport kubernetes_service.

LegacyProxyService is a Teleport proxy_service with the kubernetes section enabled.

PortForwardProtocolV1Name is the subprotocol "portforward.k8s.io" is used for port forwarding.

Name of header that specifies a request ID used to associate the error and data streams for a single forwarded connection.

Name of header that specifies the port being forwarded.

ProxyService is a Teleport proxy_service with kube_listen_addr/ kube_public_addr enabled.

The SPDY subprotocol "v4.channel.k8s.io" is used for remote command attachment/execution.

Name of header that specifies stream type.

Value for streamType header for data stream.

Value for streamType header for error stream.

Value for streamType header for terminal resize stream.

Value for streamType header for stderr stream.

Value for streamType header for stdin stream.

Value for streamType header for stdout stream.

Forwarder intercepts kubernetes requests, acting as Kubernetes API proxy.

ForwarderConfig specifies configuration for proxy forwarder.

KubeClusterConfig defines the cluster to be created.

RoleSpec defiens the role name and kube details to be created.

SpdyRoundTripper knows how to upgrade an HTTP request to one that supports multiplexed streams.

TestConfig defines the suite options.

TLSServer is TLS auth server.

TLSServerConfig is a configuration for TLS server.

WebsocketRoundTripper knows how to upgrade an HTTP request to one that supports multiplexed streams.

AWSClientGetter is an interface for getting an EKS client and an STS client.

EKSClient is the subset of the EKS Client interface we use.

ClusterFeaturesGetter is a function that returns the Teleport cluster licensed features.

GenTestKubeClientTLSCertOptions is a function that can be used to modify the identity used to generate the kube client certificate.

KubeServiceType specifies a Teleport service type which can forward Kubernetes requests.

ServeOption is a functional option for the multiplexer.

STSPresignClient is the subset of the STS presign interface we use in fetchers.