privilegedhelper

package

Go to main page

Versions in this module

v0

v0.0.28

Sep 11, 2026

Changes in this version

+ type AgentPolicy struct

+ AllowedCommands []string

+ AllowedPaths []string

+ AllowedSystemServices map[string][]string

+ ElevatableCommands []string

type ExecuteRequest

+ AgentPolicy *AgentPolicy

v0.0.27

Sep 9, 2026

Changes in this version

type Credential

+ AllowedSystemServices map[string][]string

type RemoteAction

+ SystemServices map[string]*structpb.ListValue

+ func (x *RemoteAction) GetSystemServices() map[string]*structpb.ListValue

type VerifiedCommand

+ AllowedSystemServices map[string][]string

v0.0.26

Sep 3, 2026

Changes in this version

+ const EscalationAllowed

+ const MaxMessageBytes

+ const ProtocolVersion

+ var File_privilegedhelper_private_action_proto protoreflect.FileDescriptor

+ type Client struct

+ SocketPath string

+ Timeout time.Duration

+ func (c Client) Execute(ctx context.Context, req ExecuteRequest) (*ExecuteResponse, error)

+ func (c Client) ExecuteSignedTask(ctx context.Context, envelope SignedEnvelope) (*ExecuteResponse, error)

+ type ConnectionInfo struct

+ RunnerId string

+ func (*ConnectionInfo) Descriptor() ([]byte, []int)

+ func (*ConnectionInfo) ProtoMessage()

+ func (x *ConnectionInfo) GetRunnerId() string

+ func (x *ConnectionInfo) ProtoReflect() protoreflect.Message

+ func (x *ConnectionInfo) Reset()

+ func (x *ConnectionInfo) String() string

+ type Credential struct

+ AllowedCommands []string

+ AllowedPaths []string

+ DirectorRoot json.RawMessage

+ ElevatableCommands []string

+ Keys []CredentialKey

+ OrgID int64

+ RunnerID string

+ Version int

+ func LoadCredential(path string) (*Credential, error)

+ func NewRequestCredential(keys []CredentialKey) (*Credential, error)

+ func (c *Credential) Verify(req ExecuteRequest, now time.Time) (*VerifiedCommand, error)

+ type CredentialKey struct

+ ID string

+ PEM string

+ Type KeyType

+ type DirectorKeyProof struct

+ Roots [][]byte

+ TargetFile []byte

+ TargetPath string

+ Targets []byte

+ type ExecuteRequest struct

+ Envelope SignedEnvelope

+ VerificationKeys []CredentialKey

+ Version int

+ func NewExecuteRequest(envelope SignedEnvelope) ExecuteRequest

+ type ExecuteResponse struct

+ Error string

+ ExitCode int

+ SandboxWarnings []string

+ Stderr string

+ Stdout string

+ Version int

+ type ExecutionMode string

+ const ExecutionModeReadOnly

+ const ExecutionModeRemediation

+ type Executor interface

+ Execute func(context.Context, *VerifiedCommand) (*ExecuteResponse, error)

+ type KeyType string

+ const KeyTypeED25519

+ const KeyTypeTUFDirector

+ const KeyTypeX509RSA

+ type PrivateActionTask struct

+ ActionName string

+ BundleId string

+ ConnectionInfo *ConnectionInfo

+ ExpirationTime *timestamppb.Timestamp

+ Inputs *structpb.Struct

+ OrgId int64

+ SystemInputs *SystemInputs

+ TaskId string

+ func (*PrivateActionTask) Descriptor() ([]byte, []int)

+ func (*PrivateActionTask) ProtoMessage()

+ func (x *PrivateActionTask) GetActionName() string

+ func (x *PrivateActionTask) GetBundleId() string

+ func (x *PrivateActionTask) GetConnectionInfo() *ConnectionInfo

+ func (x *PrivateActionTask) GetExpirationTime() *timestamppb.Timestamp

+ func (x *PrivateActionTask) GetInputs() *structpb.Struct

+ func (x *PrivateActionTask) GetOrgId() int64

+ func (x *PrivateActionTask) GetSystemInputs() *SystemInputs

+ func (x *PrivateActionTask) GetTaskId() string

+ func (x *PrivateActionTask) ProtoReflect() protoreflect.Message

+ func (x *PrivateActionTask) Reset()

+ func (x *PrivateActionTask) String() string

+ type RemoteAction struct

+ AllowedCommands []string

+ AllowedPaths []string

+ func (*RemoteAction) Descriptor() ([]byte, []int)

+ func (*RemoteAction) ProtoMessage()

+ func (x *RemoteAction) GetAllowedCommands() []string

+ func (x *RemoteAction) GetAllowedPaths() []string

+ func (x *RemoteAction) ProtoReflect() protoreflect.Message

+ func (x *RemoteAction) Reset()

+ func (x *RemoteAction) String() string

+ type Server struct

+ Credential *Credential

+ Executor Executor

+ IdleTimeout time.Duration

+ LogWriter io.Writer

+ Now func() time.Time

+ func (s *Server) Serve(ctx context.Context, listener net.Listener) error

+ type Signature struct

+ KeyID string

+ KeyType KeyType

+ Signature []byte

+ type SignedEnvelope struct

+ Data []byte

+ HashType string

+ Signatures []Signature

+ type SystemInputs struct

+ Input isSystemInputs_Input

+ func (*SystemInputs) Descriptor() ([]byte, []int)

+ func (*SystemInputs) ProtoMessage()

+ func (x *SystemInputs) GetInput() isSystemInputs_Input

+ func (x *SystemInputs) GetRemoteAction() *RemoteAction

+ func (x *SystemInputs) ProtoReflect() protoreflect.Message

+ func (x *SystemInputs) Reset()

+ func (x *SystemInputs) String() string

+ type SystemInputs_RemoteAction struct

+ RemoteAction *RemoteAction

+ type VerifiedCommand struct

+ AllowedCommands []string

+ AllowedPaths []string

+ Command string

+ ElevatableCommands []string

+ Mode ExecutionMode

+ TaskID string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL