Documentation
¶
Index ¶
- Constants
- func DERFromCertificates(certs []*x509.Certificate) (derBytes []byte)
- func Run(ctx context.Context, config Config) error
- type Config
- type FederationConfig
- type JWTAuthority
- type TrustDomain
- func (td *TrustDomain) Bundle() (*spiffebundle.Bundle, error)
- func (td *TrustDomain) JWTBundles() (map[string][]byte, error)
- func (td *TrustDomain) MintJWTSVID(id spiffeid.ID, audience []string, ttl time.Duration) (string, error)
- func (td *TrustDomain) MintX509SVID(id spiffeid.ID, publicKey crypto.PublicKey, ttl time.Duration) (*x509.Certificate, []*x509.Certificate, error)
- func (td *TrustDomain) Name() string
- func (td *TrustDomain) Run(ctx context.Context) (err error)
- func (td *TrustDomain) X509Bundles() (map[string][]byte, error)
- type TrustDomainConfig
- type Workload
- type WorkloadConfig
- type X509Authority
Constants ¶
Variables ¶
This section is empty.
Functions ¶
func DERFromCertificates ¶
func DERFromCertificates(certs []*x509.Certificate) (derBytes []byte)
Types ¶
type Config ¶
type Config struct {
TrustDomains []TrustDomainConfig
Federation FederationConfig
}
func LoadConfig ¶
type FederationConfig ¶
type FederationConfig struct {
Port int
}
type JWTAuthority ¶
type TrustDomain ¶
type TrustDomain struct {
// contains filtered or unexported fields
}
func NewTrustDomain ¶
func NewTrustDomain(config TrustDomainConfig) (*TrustDomain, error)
func (*TrustDomain) Bundle ¶
func (td *TrustDomain) Bundle() (*spiffebundle.Bundle, error)
func (*TrustDomain) JWTBundles ¶
func (td *TrustDomain) JWTBundles() (map[string][]byte, error)
func (*TrustDomain) MintJWTSVID ¶
func (*TrustDomain) MintX509SVID ¶
func (td *TrustDomain) MintX509SVID(id spiffeid.ID, publicKey crypto.PublicKey, ttl time.Duration) (*x509.Certificate, []*x509.Certificate, error)
func (*TrustDomain) Name ¶
func (td *TrustDomain) Name() string
func (*TrustDomain) X509Bundles ¶
func (td *TrustDomain) X509Bundles() (map[string][]byte, error)
type TrustDomainConfig ¶
type TrustDomainConfig struct {
Name spiffeid.TrustDomain
X509AuthorityTTL time.Duration
JWTAuthorityTTL time.Duration
Workloads []WorkloadConfig
}
type Workload ¶
type Workload struct {
// contains filtered or unexported fields
}
func NewWorkload ¶
func NewWorkload(x509Authority X509Authority, jwtAuthority JWTAuthority, config WorkloadConfig) (*Workload, error)
type WorkloadConfig ¶
Click to show internal directories.
Click to hide internal directories.