Documentation
¶
Overview ¶
Package server serves built-in directory and inventory facts and their private management APIs. It authenticates service keys; public user authentication and administrative authorization belong to the control plane. Stores retain ownership of mutation invariants, transactions, and audit records.
Index ¶
- func DirectoryHandler(users directory.Directory, managed directory.Store, ...) (http.Handler, error)
- func InventoryHandler(store inventory.Store, caKey, controlKey sshcert.RawPublicKey) (http.Handler, error)
- func LookupHandler(users directory.Directory, hosts inventory.Hosts, ...) (http.Handler, error)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func DirectoryHandler ¶
func DirectoryHandler(users directory.Directory, managed directory.Store, caKey, controlKey sshcert.RawPublicKey) (http.Handler, error)
DirectoryHandler assembles directory lookup and private control routes. users supplies facts and actor snapshots; managed, when nonnil, supplies mutations and SCIM provisioning. An empty control key disables all private control routes. The caller owns the sources and their lifetime.
func InventoryHandler ¶
func InventoryHandler(store inventory.Store, caKey, controlKey sshcert.RawPublicKey) (http.Handler, error)
InventoryHandler assembles managed inventory lookup and private control routes. An empty control key disables management. The caller owns the store and its lifetime; the CA reader key never confers mutation authority.
Types ¶
This section is empty.