nsc

Documentation

Index

• Constants
• Variables
• func CABundle(cert []byte) nats.Option
• func ConvertToAccountLimits(in v1alpha1.AccountLimits, defaults jwt.AccountLimits) jwt.AccountLimits
• func ConvertToNATSExportType(ieType v1alpha1.ImportExportType) jwt.ExportType
• func ConvertToNATSExports(exports []v1alpha1.AccountExport) jwt.Exports
• func ConvertToNATSImports(imports []v1alpha1.AccountImport) jwt.Imports
• func ConvertToNATSResponseType(responseType v1alpha1.ResponseType) jwt.ResponseType
• func ConvertToNATSServiceLatency(latency *v1alpha1.AccountServiceLatency) *jwt.ServiceLatency
• func ConvertToNatsLimits(in v1alpha1.NatsLimits, defaults jwt.NatsLimits) jwt.NatsLimits
• func ConvertToNatsTimeRanges(in []v1alpha1.StartEndTime) []jwt.TimeRange
• func CreateAccountClaims(resource *v1alpha1.Account, signingKey nkeys.KeyPair) (claims *jwt.AccountClaims, ajwt string, err error)
• func CreateOperatorClaims(resource *v1alpha1.Operator, signingKey nkeys.KeyPair) (*jwt.OperatorClaims, string, error)
• func CreateUserClaims(resource *v1alpha1.User, account *v1alpha1.Account, signingKey nkeys.KeyPair) (claims *jwt.UserClaims, ujwt string, err error)
• type Client
  • func Connect(url string, operator nkeys.KeyPair, systemAccountSeed []byte, ...) (*Client, error)
  • func (c *Client) Close()
  • func (c *Client) Delete(ctx context.Context, subject string) error
  • func (c *Client) Push(ctx context.Context, jwt string) error
• type SystemAccountLoader
  • func NewSystemAccountLoader(accounts clientsetv1alpha1.AccountsV1alpha1Interface, ...) *SystemAccountLoader
  • func (s *SystemAccountLoader) Load(ctx context.Context, operator *v1alpha1.Operator) (seed []byte, err error)

Constants

const (
	RequestSubjectClaimsUpdate = "$SYS.REQ.CLAIMS.UPDATE"
	RequestSubjectClaimsDelete = "$SYS.REQ.CLAIMS.DELETE"
)

Variables

var Equality = conversion.EqualitiesOrDie(

	func(a, b jwt.ClaimsData) bool {
		a.ID = ""
		b.ID = ""
		a.IssuedAt = 0
		b.IssuedAt = 0

		return a == b
	},
)

Equality provides DeepEqual capabilities for jwt related types, taking into account that some fields will always change between reconciles such as JWT IDs and IssuedAt timestamps.

Functions

func CABundle

func CABundle(cert []byte) nats.Option

CABundle is similar to nats.RootCAs but accepts a byte slice instead of a file path.

func ConvertToAccountLimits

func ConvertToAccountLimits(in v1alpha1.AccountLimits, defaults jwt.AccountLimits) jwt.AccountLimits

func ConvertToNATSExportType

func ConvertToNATSExportType(ieType v1alpha1.ImportExportType) jwt.ExportType

func ConvertToNATSExports

func ConvertToNATSExports(exports []v1alpha1.AccountExport) jwt.Exports

func ConvertToNATSImports

func ConvertToNATSImports(imports []v1alpha1.AccountImport) jwt.Imports

func ConvertToNATSResponseType

func ConvertToNATSResponseType(responseType v1alpha1.ResponseType) jwt.ResponseType

func ConvertToNATSServiceLatency

func ConvertToNATSServiceLatency(latency *v1alpha1.AccountServiceLatency) *jwt.ServiceLatency

func ConvertToNatsLimits

func ConvertToNatsLimits(in v1alpha1.NatsLimits, defaults jwt.NatsLimits) jwt.NatsLimits

func ConvertToNatsTimeRanges

func ConvertToNatsTimeRanges(in []v1alpha1.StartEndTime) []jwt.TimeRange

func CreateAccountClaims

func CreateAccountClaims(
	resource *v1alpha1.Account,
	signingKey nkeys.KeyPair,
) (claims *jwt.AccountClaims, ajwt string, err error)

func CreateOperatorClaims

func CreateOperatorClaims(resource *v1alpha1.Operator, signingKey nkeys.KeyPair) (*jwt.OperatorClaims, string, error)

func CreateUserClaims

func CreateUserClaims(
	resource *v1alpha1.User,
	account *v1alpha1.Account,
	signingKey nkeys.KeyPair,
) (claims *jwt.UserClaims, ujwt string, err error)

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

func Connect

func Connect(url string, operator nkeys.KeyPair, systemAccountSeed []byte, opts ...nats.Option) (*Client, error)

func (*Client) Close

func (c *Client) Close()

func (*Client) Delete

func (c *Client) Delete(ctx context.Context, subject string) error

func (*Client) Push

func (c *Client) Push(ctx context.Context, jwt string) error

type SystemAccountLoader

type SystemAccountLoader struct {
	// contains filtered or unexported fields
}

func NewSystemAccountLoader

func NewSystemAccountLoader(
	accounts clientsetv1alpha1.AccountsV1alpha1Interface,
	core clientsetv1.CoreV1Interface,
) *SystemAccountLoader

func (*SystemAccountLoader) Load

func (s *SystemAccountLoader) Load(ctx context.Context, operator *v1alpha1.Operator) (seed []byte, err error)