Versions in this module Expand all Collapse all v0 v0.1.1 Oct 18, 2026 Changes in this version + type IssuerFlags struct + Login []string + Workload []string + func (f *IssuerFlags) Empty() bool + func (f *IssuerFlags) OIDCIssuer() string + func (f *IssuerFlags) Register(fs *pflag.FlagSet, optional string) + func (f *IssuerFlags) WorkloadIssuer() string type Options + SigningKeyPath string type Server + func (s *Server) ReloadOperatorSigningKeys() v0.1.0 Oct 15, 2026 Changes in this version + const DefaultEphemeralNodeRetention + const DefaultMeshReconnectInterval + const DefaultNodeRetention + const DefaultWorkloadSessionTTL + const EnrollBurst + const EnrollRateLimit + const JWTVerificationTimeout + const RouterDialTimeout + const STSRateBurstDefault + const STSRateLimitDefault + func SetNodeBan(ctx context.Context, store storage.Store, node *storage.EnrolledNode, ...) error + func ValidatePolicyConfig(req *api.PolicyConfig) error + type JSONWebKey struct + Alg string + Crv string + Kid string + Kty string + Use string + X string + Y string + type JSONWebKeySet struct + Keys []JSONWebKey + type LocalES256Signer struct + func NewLocalES256SignerWithStore(store storage.Store) (*LocalES256Signer, error) + func (s *LocalES256Signer) JWKS(ctx context.Context) (*JSONWebKeySet, error) + func (s *LocalES256Signer) Rotate(gracePeriod time.Duration) (string, error) + func (s *LocalES256Signer) SignJWT(ctx context.Context, claims jwt.MapClaims) (string, error) + type MeshAdapter interface + Close func() error + DiscoverServices func(ctx context.Context, serviceType string) ([]*ServiceAnnouncement, error) + GetNodeStatus func(ctx context.Context, peerID string) (*NodeStatus, error) + PublishEvent func(ctx context.Context, eventType api.MeshEvent_Type, peerID string, ...) error + type NodeStatus struct + Addresses []string + IsReachable bool + LastSeen time.Time + PeerID string + type NopMeshAdapter struct + func NewNopMeshAdapter() *NopMeshAdapter + func (n *NopMeshAdapter) Close() error + func (n *NopMeshAdapter) DiscoverServices(ctx context.Context, serviceType string) ([]*ServiceAnnouncement, error) + func (n *NopMeshAdapter) GetNodeStatus(ctx context.Context, peerID string) (*NodeStatus, error) + func (n *NopMeshAdapter) PublishEvent(ctx context.Context, eventType api.MeshEvent_Type, peerID string, ...) error + type OIDCSigner interface + JWKS func(ctx context.Context) (*JSONWebKeySet, error) + SignJWT func(ctx context.Context, claims jwt.MapClaims) (string, error) + type Options struct + AdminToken string + AllowedAudiences []string + AutoApproveEnrollment bool + BiscuitTTL time.Duration + BiscuitTimeout time.Duration + DHTReplication int + DHTReprovideInterval time.Duration + DataSourceName string + DelegatedBiscuitTTL time.Duration + DriverName string + EphemeralNodeRetention time.Duration + InsecureSkipTLSVerify bool + KeyGracePeriod time.Duration + KeyRotationInterval time.Duration + LeaseDuration time.Duration + ListenAddr string + NodeRetention time.Duration + OIDCClientID string + OIDCIssuer string + OIDCSessionTTL time.Duration + OIDCSigner OIDCSigner + STSIssuerURL string + STSRateBurst int + STSRateLimit float64 + STSTokenTTL time.Duration + TrustForwardedHeaders bool + WorkloadIssuer string + WorkloadSessionTTL time.Duration + func (o *Options) Default() + func (o *Options) Validate() error + type P2PMeshAdapter struct + func NewMeshPublisher(ctx context.Context, store storage.Store, reconnect time.Duration) (*P2PMeshAdapter, error) + func NewP2PMeshAdapter(h host.Host, topic *pubsub.Topic, store storage.Store) (*P2PMeshAdapter, error) + func (p *P2PMeshAdapter) Close() error + func (p *P2PMeshAdapter) DiscoverServices(ctx context.Context, serviceType string) ([]*ServiceAnnouncement, error) + func (p *P2PMeshAdapter) GetNodeStatus(ctx context.Context, peerID string) (*NodeStatus, error) + func (p *P2PMeshAdapter) PublishEvent(ctx context.Context, eventType api.MeshEvent_Type, peerID string, ...) error + type Server struct + func NewServer(config Options, store storage.Store) (*Server, error) + func (s *Server) Addr() string + func (s *Server) Close() error + func (s *Server) HandleAdminBootstrapTokenAction(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminBootstrapTokens(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminEnrollmentAction(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminEnrollments(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminNodeAction(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminPolicy(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminRevoke(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleAdminStatus(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleEgress(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleEnroll(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleEnrollStatus(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleHealthz(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleInfo(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleJWKS(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleKeys(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleListNodes(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleNodeCatalog(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleOAuthAuthorizationServer(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleOAuthAuthorize(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleOAuthToken(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleOpenIDConfiguration(w http.ResponseWriter, r *http.Request) + func (s *Server) HandlePolicies(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleReadyz(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleRefresh(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleRegister(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleRevocations(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleRouterLease(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleSTSToken(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleTokenExchange(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleUserBootstrapTokens(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleUserRevoke(w http.ResponseWriter, r *http.Request) + func (s *Server) HandleUserStatus(w http.ResponseWriter, r *http.Request) + func (s *Server) Init() error + func (s *Server) RegisterRoutes(mux *http.ServeMux) + func (s *Server) RevokeBiscuitID(revocationID string, expiry time.Time) + func (s *Server) RevokeBiscuitToken(rawToken []byte, expiry time.Time) (string, error) + func (s *Server) RotateOIDCKey(gracePeriod time.Duration) (string, error) + func (s *Server) SetMeshAdapter(m MeshAdapter) + func (s *Server) Start() error + type ServiceAnnouncement struct + Addresses []string + PeerID string + ServiceName string + ServiceType string v0.1.0-rc.10 Oct 14, 2026
Go to main page