webhook

Documentation

Overview

Package webhook manages the SVID creation and rotation for the k8s-workload-registrar webhook

Index

• type SVID
  • func NewSVID(ctx context.Context, config SVIDConfig) (*SVID, error)
  • func (e *SVID) MintSVID(ctx context.Context, key crypto.Signer) (err error)
  • func (e *SVID) SVIDRotator(ctx context.Context) error
• type SVIDConfig

Types

type SVID

type SVID struct {
	// contains filtered or unexported fields
}

func NewSVID

func NewSVID(ctx context.Context, config SVIDConfig) (*SVID, error)

NewSVID creates a new SVID struct and creates the SPIFFE ID that will be used

func (*SVID) MintSVID

func (e *SVID) MintSVID(ctx context.Context, key crypto.Signer) (err error)

MintSVID requests the SPIRE Server to mint a new SVID for the webhook

func (*SVID) SVIDRotator

func (e *SVID) SVIDRotator(ctx context.Context) error

SVIDRotator requests a new certificate when half of its lifetime is left

type SVIDConfig

type SVIDConfig struct {
	Cluster            string
	Log                logrus.FieldLogger
	Namespace          string
	S                  svidv1.SVIDClient
	TrustDomain        spiffeid.TrustDomain
	WebhookCertDir     string
	WebhookServiceName string
}