server

package

v0.0.0-...-89d80b5 Latest Latest Go to latest Published: Apr 5, 2024 License: Apache-2.0 Imports: 35 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type AuthInfo struct {
	UserName string
	UserUID  string

	PodName string
	PodUID  string

	Audiences []string
}

type ExternalAuthPlugin interface {
}

type Identity interface {
	SPIFFEID() url.URL
}

type KubernetesServiceAccountIdentity struct {
	// contains filtered or unexported fields
}

func (i *KubernetesServiceAccountIdentity) GetName() string

func (i *KubernetesServiceAccountIdentity) GetNamespace() string

func (i *KubernetesServiceAccountIdentity) SPIFFEID() url.URL

type LocalSigner struct {
	// contains filtered or unexported fields
}

func NewLocalSigner() (*LocalSigner, error)

func (s *LocalSigner) CreateCertificate(ctx context.Context, template x509.Certificate) (*x509.Certificate, crypto.PrivateKey, error)

func (s *LocalSigner) GetCACertificates(ctx context.Context) ([]*x509.Certificate, error)

type SPIREServer struct {
	workload.UnimplementedSpiffeWorkloadAPIServer
	v1.UnimplementedKinspireServer
	// contains filtered or unexported fields
}

func NewSPIREServer(kubeClient client.Client, typedClient kubernetes.Interface, signer *LocalSigner, trustDomain *url.URL) (*SPIREServer, error)

func (s *SPIREServer) FetchJWTBundles(req *workload.JWTBundlesRequest, stream workload.SpiffeWorkloadAPI_FetchJWTBundlesServer) error

func (s *SPIREServer) FetchJWTSVID(ctx context.Context, req *workload.JWTSVIDRequest) (*workload.JWTSVIDResponse, error)

func (s *SPIREServer) FetchX509Bundles(req *workload.X509BundlesRequest, stream workload.SpiffeWorkloadAPI_FetchX509BundlesServer) error

func (s *SPIREServer) FetchX509SVID(req *workload.X509SVIDRequest, stream workload.SpiffeWorkloadAPI_FetchX509SVIDServer) error

func (s *SPIREServer) GetExternalAuth(ctx context.Context, req *v1.GetExternalAuthRequest) (*v1.GetExternalAuthReply, error)

func (s *SPIREServer) RegisterGRPC(grpcServer *grpc.Server)

func (s *SPIREServer) ValidateJWTSVID(ctx context.Context, req *workload.ValidateJWTSVIDRequest) (*workload.ValidateJWTSVIDResponse, error)

type ServerCertificates struct {
	TLSCertificate tls.Certificate
	// contains filtered or unexported fields
}

func CreateServerCertificates(ctx context.Context, signer *LocalSigner) (*ServerCertificates, error)