security

Documentation

Index

• Constants
• func CertPool(certPem []byte) (*x509.CertPool, error)
• func GetCertChain() (*credentials.CertChain, error)
• type Authenticator
  • func GetSidecarAuthenticator(sentryAddress string, certChain *credentials.CertChain) (Authenticator, error)
• type SignedCertificate

Constants

const (
	TLSServerName = "cluster.local"
)

Functions

func CertPool

func CertPool(certPem []byte) (*x509.CertPool, error)

func GetCertChain

func GetCertChain() (*credentials.CertChain, error)

Types

type Authenticator

type Authenticator interface {
	GetTrustAnchors() *x509.CertPool
	GetCurrentSignedCert() *SignedCertificate
	CreateSignedWorkloadCert(id string) (*SignedCertificate, error)
}

func GetSidecarAuthenticator

func GetSidecarAuthenticator(sentryAddress string, certChain *credentials.CertChain) (Authenticator, error)

GetSidecarAuthenticator returns a new authenticator with the extracted trust anchors

type SignedCertificate

type SignedCertificate struct {
	WorkloadCert  []byte
	PrivateKeyPem []byte
	Expiry        time.Time
	TrustChain    *x509.CertPool
}