IsServiceAccountToken returns true if the secret is a valid api token for the service account.

MakeGroupNames generates service account group names for the given namespace.

MakeNamespaceGroupName returns the name of the group all service accounts in the namespace are included in.

MakeUsername generates a username from the given namespace and ServiceAccount name.

MatchesUsername checks whether the provided username matches the namespace and name without allocating.

SplitUsername returns the namespace and ServiceAccount name embedded in the given username, or an error if the username is not a valid name produced by MakeUsername.

UserInfo returns a user.Info interface for the given namespace, service account name and UID.

PodNameKey is the key used in a user's "extra" to specify the pod name of the authenticating request.

PodUIDKey is the key used in a user's "extra" to specify the pod UID of the authenticating request.