ateletauth

package

v0.5.0 Latest Latest Go to latest Published: Oct 14, 2026 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/agent-substrate/substrate

Links

Open Source Insights

Documentation ¶

Overview ¶

Package ateletauth authenticates RPCs that arrive from an atelet, for the ateapi services served only to atelet.

Index ¶

type Caller
- func Authenticate(ctx context.Context, ateletSPIFFEID string) (*Caller, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Caller ¶

type Caller struct {
	PodName  string
	NodeName string
}

Caller is the verified identity of an atelet.

func Authenticate ¶

func Authenticate(ctx context.Context, ateletSPIFFEID string) (*Caller, error)

Authenticate verifies that the RPC arrived over mTLS from an atelet presenting ateletSPIFFEID, and returns the identity that atelet's certificate asserts.

The certificate chain is already verified by the TLS layer against the pod-identity CA (see buildServerCreds in cmd/ateapi/main.go), so the extensions read here are trustworthy: only the pod-identity signer can mint a certificate carrying a given pod's node name.

Source Files ¶

View all Source files

ateletauth.go

Directories ¶

Path	Synopsis
ateletauthtest Package ateletauthtest builds the peer contexts that the ateapi services served only to atelet authenticate against.	Package ateletauthtest builds the peer contexts that the ateapi services served only to atelet authenticate against.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL