cutoff

Documentation

Index

• type Cutoffs
  • func New[Y apiv1b1.YaleCRD](yaleCRDs []Y) Cutoffs
  • func NewWithDefaults() Cutoffs

Types

type Cutoffs

type Cutoffs interface {
	// ShouldRotate Return true if the key created at the given timestamp should be rotated
	ShouldRotate(createdAt time.Time) bool
	// ShouldDisable Return true if the key rotated at the given timestamp should be disabled
	ShouldDisable(rotatedAt time.Time) bool
	// SafeToDisable Return true if the key rotated at the given timestamp is safe to disable
	SafeToDisable(lastAuthTime time.Time) bool
	// ShouldDelete Return true if the key disabled at the given timestamp should be deleted
	ShouldDelete(disabledAt time.Time) bool
	// RotateAfterDays Number of days to wait to rotate a key after issuing it (the basis for ShouldRotate)
	RotateAfterDays() int
	// DisableAfterDays Number of days to wait to disable a key before rotating it (the basis for ShouldDisable)
	DisableAfterDays() int
	// DeleteAfterDays Number of days to wait to delete a key before rotating it (the basis for ShouldDelete)
	DeleteAfterDays() int
}

Cutoffs is responsible for determining when a service account key should be rotated, disabled, or deleted

func New

func New[Y apiv1b1.YaleCRD](yaleCRDs []Y) Cutoffs

func NewWithDefaults

func NewWithDefaults() Cutoffs