Documentation
¶
Overview ¶
Package policyserver defines the in-process evaluator contract and defaults.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func DefaultExpiration ¶ added in v0.1.8
func DefaultExpiration() string
DefaultExpiration returns the default certificate expiration duration
func DefaultExtensions ¶ added in v0.1.8
DefaultExtensions returns the default SSH certificate extensions
Types ¶
type PolicyEvaluator ¶
type PolicyEvaluator interface {
Evaluate(context.Context, wire.Connection, *wire.PolicyFacts) (*wire.PolicyResponse, error)
}
PolicyEvaluator decides access using validated CA-owned authentication and current directory/host facts. It has no storage or transport responsibility. It returns a positive TTL, extensions, and an optional tighter deadline. CA always enforces the authentication lifetime as an additional ceiling.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package writpolicy implements the policy server's PolicyEvaluator over a compiled writ policy, an inventory, and registries of requirement handlers, flag sources, and notify targets.
|
Package writpolicy implements the policy server's PolicyEvaluator over a compiled writ policy, an inventory, and registries of requirement handlers, flag sources, and notify targets. |
Click to show internal directories.
Click to hide internal directories.