ssh

type CertOptions struct {
	KeyID           string
	Principals      []string
	ValidAfter      time.Time
	ValidBefore     time.Time
	Extensions      map[string]string
	CriticalOptions map[string]string
}

type CredsRequest struct {
	Role      string
	Username  string
	TTLSecond int
	// TokenID is the hashed client token that issued the lease (cascade revoke).
	TokenID string
	// Tenant / TenantMode scope lease IDs (W64-01).
	Tenant     string
	TenantMode bool
}

type CredsResult struct {
	LeaseID    string
	Username   string
	PrivateKey string
	SignedKey  string
	Role       string
	TTLSeconds int
	MaxTTL     int
	ExpiresAt  time.Time
	Warnings   []string
}

type Engine struct {
	// contains filtered or unexported fields
}

type RegistryAdapter struct {
	*Engine
}

type RoleConfig struct {
	Name         string
	TTLSeconds   int
	DefaultTTL   int
	MaxTTL       int
	Period       int
	Renewable    *bool
	MaxLeases    int
	CAKeyPath    string
	AllowedUsers []string
	DefaultUser  string
	KeyType      string
	Extensions   map[string]string
}