grantdir

Overview ¶

Package grantdir delivers grants to every file-fed home from a directory polled for *.jwt files. A new or changed file is GrantAdded with its contents; a removed file is GrantRemoved with the UID read (unverified: it is only used to stop admissions) from the last copy. An empty file is skipped until its token is written, so emptying a grant's file to rewrite it does not remove the grant. The standalone home points it at -grants-dir. So does the Kubernetes home, whose grant fetcher writes there.