attestation

type AttestRequest struct {
	EKPub  []byte `json:"ekPub"`  // TPM2B_PUBLIC: EK public key
	SRKPub []byte `json:"srkPub"` // TPM2B_PUBLIC: SRK public key (from tpm2_readpublic)
}

type AttestResponse struct {
	CredentialBlob  []byte `json:"credentialBlob"`      // MakeCredential output: HMAC + encrypted credential
	EncryptedSecret []byte `json:"encryptedSecret"`     // RSA-OAEP encrypted seed
	EncryptedToken  []byte `json:"encryptedToken"`      // AES-256-GCM encrypted bootstrap token
	GCMNonce        []byte `json:"gcmNonce"`            // AES-GCM nonce
	ClusterCA       string `json:"clusterCA,omitempty"` // PEM-encoded CA certificate
}

type Handler struct {
	Clientset      kubernetes.Interface
	ClusterCA      []byte // PEM-encoded cluster CA certificate
	LookupNodeByIP func(ctx context.Context, ip string) (*v1alpha3.Machine, error)
	StatusUpdater  StatusUpdater
}

type StatusUpdater interface {
	Update(ctx context.Context, node *v1alpha3.Machine) error
}