types

type ACL struct {
	MatchPrincipal string       `yaml:"match_principal"`
	Credentials    []Credential `yaml:"credentials"`
}

type ConfigFile struct {
	SPIFFE *SpiffeConfig `yaml:"spiffe"`
	ACLs   []ACL         `yaml:"acls"`
}

type Credential struct {
	Provider        string `yaml:"provider"`
	ObjectReference string `yaml:"object_reference"`
}

type Files struct {
	TrustDomainCA string `yaml:"trust_domain_ca"`
	SVIDCert      string `yaml:"svid_cert"`
	SVIDKey       string `yaml:"svid_key"`
}

type InMemory struct {
	TrustDomainCA []byte
	SVIDCert      []byte
	SVIDKey       []byte
}

type SVIDSources struct {
	WorkloadAPI *WorkloadAPI `yaml:"workload_api,omitempty"`
	Files       *Files       `yaml:"files,omitempty"`

	// InMemory is only used in testing
	InMemory *InMemory
}

type SpiffeConfig struct {
	SVIDSources SVIDSources `yaml:"svid_sources"`
}

type WorkloadAPI struct {
	SocketPath string `yaml:"socket_path"`
}