Directories
¶
| Path | Synopsis |
|---|---|
|
Package auth provides authentication and authorization middleware for the kube-workspaces API.
|
Package auth provides authentication and authorization middleware for the kube-workspaces API. |
|
Package broker implements the read-only RFB multi-viewer feasibility spike.
|
Package broker implements the read-only RFB multi-viewer feasibility spike. |
|
Package display coordinates the single interactive VM display across API replicas.
|
Package display coordinates the single interactive VM display across API replicas. |
|
Package exec provides WebSocket-based remote command execution in workspace pods.
|
Package exec provides WebSocket-based remote command execution in workspace pods. |
|
Package execution owns agent-backed machine management, independently of the desktop/display grant and the existing serial/SSH/container exec bridges.
|
Package execution owns agent-backed machine management, independently of the desktop/display grant and the existing serial/SSH/container exec bridges. |
|
enrollment
Package enrollment implements one-use, CSR-bound management bootstrap issuance.
|
Package enrollment implements one-use, CSR-bound management bootstrap issuance. |
|
grants
Package grants defines the independently verifiable management-v1 grant envelope.
|
Package grants defines the independently verifiable management-v1 grant envelope. |
|
management
Package management wires the opt-in management issuer and trusted bootstrap importer.
|
Package management wires the opt-in management issuer and trusted bootstrap importer. |
|
pki
Package pki defines management-only certificate identities and mutual TLS.
|
Package pki defines management-only certificate identities and mutual TLS. |
|
qga
Package qga implements the server side of the approved QGA pod-exec pilot transport (`qga-pod-exec/v1`): a Kubernetes-authenticated pod exec into the current KubeVirt virt-launcher, driving the fixed installed runner through the QEMU guest agent.
|
Package qga implements the server side of the approved QGA pod-exec pilot transport (`qga-pod-exec/v1`): a Kubernetes-authenticated pod exec into the current KubeVirt virt-launcher, driving the fixed installed runner through the QEMU guest agent. |
|
storage
Package storage implements the durable-and-ephemeral execution store: a searchable metadata/audit layer (PostgreSQL in persistent modes, bounded in-memory in ephemeral mode) plus an encrypted, hash-chained recording chunk store (S3-compatible in persistent modes, bounded encrypted temp files in ephemeral mode).
|
Package storage implements the durable-and-ephemeral execution store: a searchable metadata/audit layer (PostgreSQL in persistent modes, bounded in-memory in ephemeral mode) plus an encrypted, hash-chained recording chunk store (S3-compatible in persistent modes, bounded encrypted temp files in ephemeral mode). |
|
updates
Package updates verifies publisher-authenticated agent-update manifests, authenticated machine inventory reports and the write-ahead upgrade journal, plus bounded payload streams.
|
Package updates verifies publisher-authenticated agent-update manifests, authenticated machine inventory reports and the write-ahead upgrade journal, plus bounded payload streams. |
|
upgrades
Package upgrades implements durable off-guest agent-upgrade admission: an exclusive per-VM reservation, idempotent start, safe cancellation, explicit rollback admission and the recording/audit evidence trail.
|
Package upgrades implements durable off-guest agent-upgrade admission: an exclusive per-VM reservation, idempotent start, safe cancellation, explicit rollback admission and the recording/audit evidence trail. |
|
Package k8s provides Kubernetes client wrappers for the kube-workspaces API server.
|
Package k8s provides Kubernetes client wrappers for the kube-workspaces API server. |
|
Package monitoring owns process-local, client-facing bridge telemetry.
|
Package monitoring owns process-local, client-facing bridge telemetry. |
|
Package proxy implements HTTP reverse proxying to workspace pods.
|
Package proxy implements HTTP reverse proxying to workspace pods. |
|
Package rfb contains protocol primitives for the shared-display broker.
|
Package rfb contains protocol primitives for the shared-display broker. |
Click to show internal directories.
Click to hide internal directories.