bless

Documentation

Index

• type Certificate
  • func (c *Certificate) MarshalJSON() ([]byte, error)
  • func (c *Certificate) UnmarshalJSON(data []byte) error
• type Identity
• type OIDC
  • func NewOIDC(awsClient *cziAWS.Client, lambdaConfig *config.LambdaConfig) *OIDC
  • func (o *OIDC) RequestCert(ctx context.Context, awsClient *cziAWS.Client, signingRequest *SigningRequest) (*ssh.Certificate, error)
• type OktaAccessTokenInput
• type PublicKeyToSign
  • func NewPublicKeyToSign(key crypto.PublicKey) *PublicKeyToSign
  • func (p *PublicKeyToSign) MarshalJSON() ([]byte, error)
  • func (p *PublicKeyToSign) UnmarshalJSON(data []byte) error
• type RemoteUsernames
  • func (ru RemoteUsernames) List() []string
  • func (ru RemoteUsernames) MarshalJSON() ([]byte, error)
  • func (ru RemoteUsernames) String() string
  • func (ru RemoteUsernames) UnmarshalJSON(data []byte) error
• type Response
• type SigningRequest

Types

type Certificate

type Certificate struct {
	// contains filtered or unexported fields
}

func (*Certificate) MarshalJSON

func (c *Certificate) MarshalJSON() ([]byte, error)

func (*Certificate) UnmarshalJSON

func (c *Certificate) UnmarshalJSON(data []byte) error

type Identity

type Identity struct {
	OktaAccessToken *OktaAccessTokenInput `json:"okta_identity,omitempty"`
}

Identity represents different types of identity assertions that we can use

type OIDC

type OIDC struct {
	// contains filtered or unexported fields
}

OIDC is an oidc client

func NewOIDC

func NewOIDC(
	awsClient *cziAWS.Client,
	lambdaConfig *config.LambdaConfig,
) *OIDC

NewOIDC returns a new OIDC client

func (*OIDC) RequestCert

func (o *OIDC) RequestCert(
	ctx context.Context,
	awsClient *cziAWS.Client,
	signingRequest *SigningRequest,
) (*ssh.Certificate, error)

RequestCert requests a new certificate

type OktaAccessTokenInput

type OktaAccessTokenInput struct {
	AccessToken string
}

type PublicKeyToSign

type PublicKeyToSign struct {
	// contains filtered or unexported fields
}

func NewPublicKeyToSign

func NewPublicKeyToSign(key crypto.PublicKey) *PublicKeyToSign

func (*PublicKeyToSign) MarshalJSON

func (p *PublicKeyToSign) MarshalJSON() ([]byte, error)

func (*PublicKeyToSign) UnmarshalJSON

func (p *PublicKeyToSign) UnmarshalJSON(data []byte) error

type RemoteUsernames

type RemoteUsernames []string

func (RemoteUsernames) List

func (ru RemoteUsernames) List() []string

List returns the []string representation of RemoteUsernames

func (RemoteUsernames) MarshalJSON

func (ru RemoteUsernames) MarshalJSON() ([]byte, error)

func (RemoteUsernames) String

func (ru RemoteUsernames) String() string

String returns the string representation of RemoteUsernames

func (RemoteUsernames) UnmarshalJSON

func (ru RemoteUsernames) UnmarshalJSON(data []byte) error

type Response

type Response struct {
	Certificate  *Certificate `json:"certificate,omitempty"`
	ErrorType    *string      `json:"errorType,omitempty"`
	ErrorMessage *string      `json:"errorMessage,omitempty"`
}

HACK(el): Temporarily hard-coding this here but should import from ssh-ca-lambda instead

type SigningRequest

type SigningRequest struct {
	RemoteUsernames RemoteUsernames  `json:"remote_usernames,omitempty"`
	PublicKeyToSign *PublicKeyToSign `json:"public_key_to_sign,omitempty"`

	// IdentityAssertion used to verify the caller
	Identity Identity `json:"identity,omitempty"`
}

SigningRequest is a request for a certificate TODO(el): copy/paste from ssh-ca-lambda. Use that once open source