identity

README

QuicSec Identity Manager

Identity Manager provides pluggable integration with Identity Platforms.

The currently supported Identity Platform plugins are:

• Cert-manager-CSI-SPIFFE (workload identity - SPIFFE)
• Cert-manager (workload identity)

Contributing Plugins

ToDo - provide documentation here on how to contribute additional Identity plugins

Documentation

Index

• func GetCert() (*tls.Certificate, error)
• func GetCertPool() (*x509.CertPool, error)
• func GetCurrentIdentity() (spiffeid.ID, error)
• func IDFromCert(cert *x509.Certificate) (spiffeid.ID, error)
• func VerifyIdentity(uri string) bool

Functions

func GetCert

func GetCert() (*tls.Certificate, error)

func GetCertPool

func GetCertPool() (*x509.CertPool, error)

func GetCurrentIdentity

func GetCurrentIdentity() (spiffeid.ID, error)

func IDFromCert

func IDFromCert(cert *x509.Certificate) (spiffeid.ID, error)

IDFromCert extracts the SPIFFE ID from the URI SAN of the provided certificate. It will return an an error if the certificate does not have exactly one URI SAN with a well-formed SPIFFE ID.

func VerifyIdentity

func VerifyIdentity(uri string) bool