Documentation
¶
Overview ¶
Package certificatesigningrequest is a generated GoMock package.
Index ¶
- func CreateCertificateSigningRequestFromUntrusted(ctx context.Context, svc Service, orgId uuid.UUID, ...) (*domain.CertificateSigningRequest, domain.Status)
- func ReplaceCertificateSigningRequestFromUntrusted(ctx context.Context, svc Service, orgId uuid.UUID, name string, ...) (*domain.CertificateSigningRequest, domain.Status)
- func SanitizeCertificateSigningRequest(csr *domain.CertificateSigningRequest)
- type MockService
- func (m *MockService) CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
- func (m *MockService) DeleteCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) domain.Status
- func (m *MockService) EXPECT() *MockServiceMockRecorder
- func (m *MockService) GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (*domain.CertificateSigningRequest, domain.Status)
- func (m *MockService) ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, ...) (*domain.CertificateSigningRequestList, domain.Status)
- func (m *MockService) PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (*domain.CertificateSigningRequest, domain.Status)
- func (m *MockService) ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, ...) (*domain.CertificateSigningRequest, domain.Status)
- func (m *MockService) UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, ...) (*domain.CertificateSigningRequest, domain.Status)
- type MockServiceMockRecorder
- func (mr *MockServiceMockRecorder) CreateCertificateSigningRequest(ctx, orgId, csr any) *gomock.Call
- func (mr *MockServiceMockRecorder) DeleteCertificateSigningRequest(ctx, orgId, name any) *gomock.Call
- func (mr *MockServiceMockRecorder) GetCertificateSigningRequest(ctx, orgId, name any) *gomock.Call
- func (mr *MockServiceMockRecorder) ListCertificateSigningRequests(ctx, orgId, params any) *gomock.Call
- func (mr *MockServiceMockRecorder) PatchCertificateSigningRequest(ctx, orgId, name, patch any) *gomock.Call
- func (mr *MockServiceMockRecorder) ReplaceCertificateSigningRequest(ctx, orgId, name, csr any) *gomock.Call
- func (mr *MockServiceMockRecorder) UpdateCertificateSigningRequestApproval(ctx, orgId, name, csr any) *gomock.Call
- type Service
- type ServiceHandler
- func (h *ServiceHandler) CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
- func (h *ServiceHandler) DeleteCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) domain.Status
- func (h *ServiceHandler) GenerateEnrollmentCredential(ctx context.Context, orgId uuid.UUID, baseName string, ownerKind string, ...) (*crypto.EnrollmentCredential, domain.Status)
- func (h *ServiceHandler) GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (*domain.CertificateSigningRequest, domain.Status)
- func (h *ServiceHandler) ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, ...) (*domain.CertificateSigningRequestList, domain.Status)
- func (h *ServiceHandler) PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (*domain.CertificateSigningRequest, domain.Status)
- func (h *ServiceHandler) ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, ...) (*domain.CertificateSigningRequest, domain.Status)
- func (h *ServiceHandler) UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, ...) (*domain.CertificateSigningRequest, domain.Status)
- type TracedService
- func (_d *TracedService) CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
- func (_d *TracedService) DeleteCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (s1 domain.Status)
- func (_d *TracedService) GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
- func (_d *TracedService) ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, ...) (cp1 *domain.CertificateSigningRequestList, s1 domain.Status)
- func (_d *TracedService) PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
- func (_d *TracedService) ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, ...) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
- func (_d *TracedService) UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, ...) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CreateCertificateSigningRequestFromUntrusted ¶
func CreateCertificateSigningRequestFromUntrusted(ctx context.Context, svc Service, orgId uuid.UUID, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
CreateCertificateSigningRequestFromUntrusted sanitizes an untrusted CSR document, then creates it.
func ReplaceCertificateSigningRequestFromUntrusted ¶
func ReplaceCertificateSigningRequestFromUntrusted(ctx context.Context, svc Service, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
ReplaceCertificateSigningRequestFromUntrusted sanitizes an untrusted CSR document, then replaces it.
func SanitizeCertificateSigningRequest ¶
func SanitizeCertificateSigningRequest(csr *domain.CertificateSigningRequest)
SanitizeCertificateSigningRequest clears status and managed metadata from an untrusted CSR document (HTTP body). Callers that must set Owner (e.g. the agent creating its own device CSR) must not use this.
Types ¶
type MockService ¶
type MockService struct {
// contains filtered or unexported fields
}
MockService is a mock of Service interface.
func NewMockService ¶
func NewMockService(ctrl *gomock.Controller) *MockService
NewMockService creates a new mock instance.
func (*MockService) CreateCertificateSigningRequest ¶
func (m *MockService) CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
CreateCertificateSigningRequest mocks base method.
func (*MockService) DeleteCertificateSigningRequest ¶
func (m *MockService) DeleteCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) domain.Status
DeleteCertificateSigningRequest mocks base method.
func (*MockService) EXPECT ¶
func (m *MockService) EXPECT() *MockServiceMockRecorder
EXPECT returns an object that allows the caller to indicate expected use.
func (*MockService) GetCertificateSigningRequest ¶
func (m *MockService) GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (*domain.CertificateSigningRequest, domain.Status)
GetCertificateSigningRequest mocks base method.
func (*MockService) ListCertificateSigningRequests ¶
func (m *MockService) ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, params domain.ListCertificateSigningRequestsParams) (*domain.CertificateSigningRequestList, domain.Status)
ListCertificateSigningRequests mocks base method.
func (*MockService) PatchCertificateSigningRequest ¶
func (m *MockService) PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (*domain.CertificateSigningRequest, domain.Status)
PatchCertificateSigningRequest mocks base method.
func (*MockService) ReplaceCertificateSigningRequest ¶
func (m *MockService) ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
ReplaceCertificateSigningRequest mocks base method.
func (*MockService) UpdateCertificateSigningRequestApproval ¶
func (m *MockService) UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
UpdateCertificateSigningRequestApproval mocks base method.
type MockServiceMockRecorder ¶
type MockServiceMockRecorder struct {
// contains filtered or unexported fields
}
MockServiceMockRecorder is the mock recorder for MockService.
func (*MockServiceMockRecorder) CreateCertificateSigningRequest ¶
func (mr *MockServiceMockRecorder) CreateCertificateSigningRequest(ctx, orgId, csr any) *gomock.Call
CreateCertificateSigningRequest indicates an expected call of CreateCertificateSigningRequest.
func (*MockServiceMockRecorder) DeleteCertificateSigningRequest ¶
func (mr *MockServiceMockRecorder) DeleteCertificateSigningRequest(ctx, orgId, name any) *gomock.Call
DeleteCertificateSigningRequest indicates an expected call of DeleteCertificateSigningRequest.
func (*MockServiceMockRecorder) GetCertificateSigningRequest ¶
func (mr *MockServiceMockRecorder) GetCertificateSigningRequest(ctx, orgId, name any) *gomock.Call
GetCertificateSigningRequest indicates an expected call of GetCertificateSigningRequest.
func (*MockServiceMockRecorder) ListCertificateSigningRequests ¶
func (mr *MockServiceMockRecorder) ListCertificateSigningRequests(ctx, orgId, params any) *gomock.Call
ListCertificateSigningRequests indicates an expected call of ListCertificateSigningRequests.
func (*MockServiceMockRecorder) PatchCertificateSigningRequest ¶
func (mr *MockServiceMockRecorder) PatchCertificateSigningRequest(ctx, orgId, name, patch any) *gomock.Call
PatchCertificateSigningRequest indicates an expected call of PatchCertificateSigningRequest.
func (*MockServiceMockRecorder) ReplaceCertificateSigningRequest ¶
func (mr *MockServiceMockRecorder) ReplaceCertificateSigningRequest(ctx, orgId, name, csr any) *gomock.Call
ReplaceCertificateSigningRequest indicates an expected call of ReplaceCertificateSigningRequest.
func (*MockServiceMockRecorder) UpdateCertificateSigningRequestApproval ¶
func (mr *MockServiceMockRecorder) UpdateCertificateSigningRequestApproval(ctx, orgId, name, csr any) *gomock.Call
UpdateCertificateSigningRequestApproval indicates an expected call of UpdateCertificateSigningRequestApproval.
type Service ¶
type Service interface {
ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, params domain.ListCertificateSigningRequestsParams) (*domain.CertificateSigningRequestList, domain.Status)
CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
DeleteCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) domain.Status
GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (*domain.CertificateSigningRequest, domain.Status)
PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (*domain.CertificateSigningRequest, domain.Status)
ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
}
func WrapWithTracing ¶
WrapWithTracing returns a Service that wraps inner with tracing spans, or nil if inner is nil.
type ServiceHandler ¶
type ServiceHandler struct {
// contains filtered or unexported fields
}
func NewServiceHandler ¶
func NewServiceHandler(store certificatesigningrequeststore.Store, enrollmentRequestStore enrollmentrequeststore.Store, ca *crypto.CAClient, events events.Service, log logrus.FieldLogger, agentEndpoint string, uiUrl string) *ServiceHandler
NewServiceHandler creates a new certificatesigningrequest ServiceHandler instance. agentEndpoint/uiUrl are only used by GenerateEnrollmentCredential (they're embedded in the returned crypto.EnrollmentCredential); pass "" if a caller never needs enrollment credentials.
func (*ServiceHandler) CreateCertificateSigningRequest ¶
func (h *ServiceHandler) CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
func (*ServiceHandler) DeleteCertificateSigningRequest ¶
func (*ServiceHandler) GenerateEnrollmentCredential ¶
func (h *ServiceHandler) GenerateEnrollmentCredential(ctx context.Context, orgId uuid.UUID, baseName string, ownerKind string, ownerName string) (*crypto.EnrollmentCredential, domain.Status)
GenerateEnrollmentCredential creates a new enrollment credential for image building. This generates a unique key pair and uses the CSR service to get a signed certificate, allowing devices to enroll without pre-distributed credentials.
The flow: 1. Generate a new ECDSA key pair 2. Create a CSR resource and submit it via CreateCertificateSigningRequest 3. The CSR service auto-approves and signs enrollment certificates 4. Return the certificate, private key, and CA bundle
Parameters:
- ctx: context for the operation
- orgId: organization ID
- baseName: base name for the CSR (will be made unique with UUID suffix)
- ownerKind: the kind of the resource that owns this CSR (e.g., "ImageBuild")
- ownerName: the name of the resource that owns this CSR
func (*ServiceHandler) GetCertificateSigningRequest ¶
func (h *ServiceHandler) GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (*domain.CertificateSigningRequest, domain.Status)
func (*ServiceHandler) ListCertificateSigningRequests ¶
func (h *ServiceHandler) ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, params domain.ListCertificateSigningRequestsParams) (*domain.CertificateSigningRequestList, domain.Status)
func (*ServiceHandler) PatchCertificateSigningRequest ¶
func (h *ServiceHandler) PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (*domain.CertificateSigningRequest, domain.Status)
func (*ServiceHandler) ReplaceCertificateSigningRequest ¶
func (h *ServiceHandler) ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
func (*ServiceHandler) UpdateCertificateSigningRequestApproval ¶
func (h *ServiceHandler) UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (*domain.CertificateSigningRequest, domain.Status)
NOTE: Approval currently also issues a certificate - this will change in the future based on policy
type TracedService ¶
type TracedService struct {
// contains filtered or unexported fields
}
TracedService wraps a Service implementation with OpenTelemetry tracing.
func (*TracedService) CreateCertificateSigningRequest ¶
func (_d *TracedService) CreateCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, csr domain.CertificateSigningRequest) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
func (*TracedService) DeleteCertificateSigningRequest ¶
func (*TracedService) GetCertificateSigningRequest ¶
func (_d *TracedService) GetCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
func (*TracedService) ListCertificateSigningRequests ¶
func (_d *TracedService) ListCertificateSigningRequests(ctx context.Context, orgId uuid.UUID, params domain.ListCertificateSigningRequestsParams) (cp1 *domain.CertificateSigningRequestList, s1 domain.Status)
func (*TracedService) PatchCertificateSigningRequest ¶
func (_d *TracedService) PatchCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, patch domain.PatchRequest) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
func (*TracedService) ReplaceCertificateSigningRequest ¶
func (_d *TracedService) ReplaceCertificateSigningRequest(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
func (*TracedService) UpdateCertificateSigningRequestApproval ¶
func (_d *TracedService) UpdateCertificateSigningRequestApproval(ctx context.Context, orgId uuid.UUID, name string, csr domain.CertificateSigningRequest) (cp1 *domain.CertificateSigningRequest, s1 domain.Status)
Source Files
Click to show internal directories.
Click to hide internal directories.