trustbundle

Documentation

Index

• Constants
• func ParseCertficates(raw []byte) ([]*x509.Certificate, error)
• type Manager
  • func NewManager(mgr manager.Manager, log logr.Logger) *Manager
  • func (m *Manager) ServeHTTP(w http.ResponseWriter, r *http.Request)
  • func (m *Manager) Start() error
• type Secret
  • func (s Secret) GetJWKs() ([]jwk.Key, error)
• type TrustBundle

Constants

const (
	CertsDataKey                              = "certs"
	TrustDomainLabel                          = "istio.banzaicloud.io/trust-domain"
	TrustBundleCASecretType corev1.SecretType = "istio.banzaicloud.io/trust-bundle-ca"
	WebhookEndpointPath                       = "/spiffe-trust-bundle"
)

Functions

func ParseCertficates

func ParseCertficates(raw []byte) ([]*x509.Certificate, error)

Types

type Manager

type Manager struct {
	// contains filtered or unexported fields
}

func NewManager

func NewManager(mgr manager.Manager, log logr.Logger) *Manager

func (*Manager) ServeHTTP

func (m *Manager) ServeHTTP(w http.ResponseWriter, r *http.Request)

func (*Manager) Start

func (m *Manager) Start() error

type Secret

type Secret struct {
	*corev1.Secret
	Revision string
	Certs    []*x509.Certificate
}

func (Secret) GetJWKs

func (s Secret) GetJWKs() ([]jwk.Key, error)

type TrustBundle

type TrustBundle struct {
	Sequence    int64     `json:"spiffe_sequence"`
	RefreshHint float64   `json:"spiffe_refresh_hint"`
	Keys        []jwk.Key `json:"keys"`
	TrustDomain string    `json:"trust_domain,omitempty"`
}