Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

identity

package

Go to main page

Versions in this module

v0

v0.5.6

May 23, 2023

Changes in this version

+ func Authorizerd(idConfig *IdentityConfig, stopChan <-chan struct{}) error

type IdentityConfig

+ AuthorizationCacheInterval string

+ AuthorizationPolicyDomains string

+ AuthorizationServerAddr string

+ PolicyRefreshInterval string

+ PublicKeyRefreshInterval string

v0.4.6

May 23, 2023

v0.4.5

May 19, 2023

v0.4.0

Apr 20, 2023

v0.3.5

May 19, 2023

v0.3.0

Apr 20, 2023

Changes in this version

+ var DEFAULT_COUNTRY = "US"

+ var DEFAULT_DNS_SUFFIX = "athenz.cloud"

+ var DEFAULT_ENDPOINT string

+ var DEFAULT_INTERMEDIATE_CERT_BUNDLE string

+ var DEFAULT_ORGANIZATION string

+ var DEFAULT_ORGANIZATIONAL_UNIT = "Athenz"

+ var DEFAULT_PROVINCE string

+ var DEFAULT_ROLE_AUTH_HEADER = "Athenz-Role-Auth"

+ var DEFAULT_ROLE_CERT_EXPIRY_TIME_BUFFER_MINUTES = "5"

+ var DEFAULT_ROLE_CERT_EXPIRY_TIME_BUFFER_MINUTES_INT int

+ var DEFAULT_ROLE_CERT_FILENAME_DELIMITER = ":role."

+ var DEFAULT_TOKEN_EXPIRY_TIME = "120"

+ var DEFAULT_TOKEN_EXPIRY_TIME_INT int

+ func Certificated(idConfig *IdentityConfig, stopChan <-chan struct{}) error

+ func InitDefaultValues()

+ func InitIdentityHandler(config *IdentityConfig) (*identityHandler, error)

+ func Metricsd(idConfig *IdentityConfig, stopChan <-chan struct{}) error

+ func PrepareIdentityCsrOptions(config *IdentityConfig, domain, service string) (*util.CSROptions, error)

+ func PrepareRoleCsrOptions(config *IdentityConfig, domain, service string) (*[]util.CSROptions, error)

+ func PrivateKeyFromPEMBytes(privatePEMBytes []byte) (crypto.Signer, error)

+ func Tokend(idConfig *IdentityConfig, stopChan <-chan struct{}) error

+ type AccessToken struct

+ Domain string

+ Expiry int64

+ Role string

+ TokenString string

+ type IdentityConfig struct

+ AthenzDomain string

+ AthenzPrefix string

+ AthenzSuffix string

+ Backup string

+ CaCertFile string

+ CertFile string

+ CertSecret string

+ DNSSuffix string

+ DelayJitterSeconds int64

+ DeleteInstanceID bool

+ Endpoint string

+ Init bool

+ IntermediateCertBundle string

+ KeyFile string

+ MetricsServerAddr string

+ Namespace string

+ PodIP string

+ PodUID string

+ ProviderService string

+ Refresh time.Duration

+ Reloader *util.CertReloader

+ RoleAuthHeader string

+ RoleCertDir string

+ RoleCertFilenameDelimiter string

+ SaTokenFile string

+ ServerCACert string

+ ServiceAccount string

+ TargetDomainRoles string

+ TokenDir string

+ TokenRefresh time.Duration

+ TokenServerAddr string

+ TokenType string

+ type InstanceIdentity struct

+ X509CACertificatePEM string

+ X509CertificatePEM string

+ func InstanceIdentityFromPEMBytes(pemBytes []byte) (identity *InstanceIdentity, err error)

+ type RoleCertificate struct

+ DNSNames []string

+ Domain string

+ Issuer pkix.Name

+ NotAfter time.Time

+ NotBefore time.Time

+ Role string

+ SerialNumber *big.Int

+ Subject pkix.Name

+ X509Certificate string

+ type RoleToken struct

+ Domain string

+ Expiry int64

+ Role string

+ TokenString string