Canonicalize validates IAM resources are appropriate for the authenticator and converts STS assumed roles into the IAM role resource.

NewGenerator creates a Generator and returns it.

NewSTSError creates a error of type STS.

NewVerifier creates a Verifier that is bound to the clusterID and uses the default http client.

FormatError is returned when there is a problem with token that is an encoded sts request.

Identity is returned on successful Verify() results.

STSError is returned when there was either an error calling STS or a problem processing the data returned from STS.

Token is generated and used by Kubernetes client-go to authenticate with a Kubernetes cluster.

Generator provides new tokens for the AWS IAM Authenticator.

Verifier validates tokens by calling STS and returning the associated identity.