svid

Documentation

Index

• Constants
• type Client
• type Rotator
  • func NewRotator(c *RotatorConfig) (Rotator, client.Client)
• type RotatorConfig
• type State

Constants

const DefaultRotatorInterval = 5 * time.Second

Types

type Client

type Client interface {
	RenewSVID(ctx context.Context, csr []byte) (*client.X509SVID, error)
	Release()
}

type Rotator

type Rotator interface {
	Run(ctx context.Context) error

	State() State
	Subscribe() observer.Stream
	GetRotationMtx() *sync.RWMutex
	SetRotationFinishedHook(func())
}

func NewRotator

func NewRotator(c *RotatorConfig) (Rotator, client.Client)

type RotatorConfig

type RotatorConfig struct {
	SVIDKeyManager         keymanager.SVIDKeyManager
	Log                    logrus.FieldLogger
	Metrics                telemetry.Metrics
	TrustDomain            spiffeid.TrustDomain
	ServerAddr             string
	NodeAttestor           nodeattestor.NodeAttestor
	Reattestable           bool
	DisableReattestToRenew bool

	// Initial SVID and key
	SVID    []*x509.Certificate
	SVIDKey keymanager.Key

	BundleStream *cache.BundleStream

	// How long to wait between expiry checks
	Interval time.Duration

	// Clk is the clock that the rotator will use to create a ticker
	Clk clock.Clock

	RotationStrategy *rotationutil.RotationStrategy
}

type State

type State struct {
	SVID         []*x509.Certificate
	Key          crypto.Signer
	Reattestable bool
}