Documentation
¶
Overview ¶
Package standalone is the home for a plain host: no scheduler, no kubelet. The issuer is the control plane. Liveness is "the issuer's key set refreshed recently". Grants arrive inside Clone requests or as *.jwt files dropped into a directory for pre-warming. Readiness is the Watch stream. fiberd owns a delegated cgroup subtree it was pointed at.
Index ¶
- type Config
- type Home
- func (h *Home) CgroupRoot() string
- func (h *Home) Devices(context.Context, core.Grant) (core.DeviceChannel, func(), error)
- func (h *Home) Grants(ctx context.Context) (<-chan home.GrantEvent, error)
- func (h *Home) Health() *core.SourceHealth
- func (h *Home) Name() string
- func (h *Home) PublishReady(context.Context, string, bool) error
- func (h *Home) Run(ctx context.Context)
- func (h *Home) Scope() []core.ScopeClaim
- func (h *Home) SetIssuerReachable(reachable bool)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct {
// Cache is the verifier's JWKS cache; its refreshes are the liveness
// signal. Nil means no issuer (development verifier). The issuer then
// counts as reachable on a timer until told otherwise.
Cache *grant.Cache
// StaleTTL: silence from the issuer longer than this is unhealthy.
StaleTTL time.Duration
// GrantsDir, when set, is polled for *.jwt files to pre-admit.
GrantsDir string
Poll time.Duration
// CgroupRoot is the delegated cgroup v2 subtree (default
// /sys/fs/cgroup/fiberd).
CgroupRoot string
// Devices is the static device set every grant's engine may drive
// (paths or ids): the standalone home's device channel. Empty means
// no devices.
Devices []string
}
type Home ¶
type Home struct {
// contains filtered or unexported fields
}
func (*Home) CgroupRoot ¶
func (*Home) Devices ¶
Devices: the static device set fiberd was started with, shared by every grant; nothing to release.
func (*Home) Grants ¶
Grants polls GrantsDir (see grantdir): a new or changed *.jwt file is GrantAdded, a removed one GrantRemoved.
func (*Home) Health ¶
func (h *Home) Health() *core.SourceHealth
func (*Home) Run ¶
Run keeps the liveness signal flowing: issuer key refreshes when there is an issuer, a plain timer otherwise.
func (*Home) Scope ¶
func (h *Home) Scope() []core.ScopeClaim
Scope: a standalone host asserts nothing beyond min(lease, fence).
func (*Home) SetIssuerReachable ¶
SetIssuerReachable is the test-only override behind fiberd's admin socket. false marks the issuer unreachable now and keeps it so. true resumes the liveness signal and marks it reachable.
Source Files