workload

package

v1.14.9 Latest Latest Go to latest Published: Oct 20, 2026 License: Apache-2.0 Imports: 25 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/spiffe/spire

Links

Documentation ¶

Index ¶

type Attestor
type Config
type Handler
- func New(c Config) *Handler
type Manager

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Attestor ¶ added in v0.12.0

type Attestor interface {
	Attest(ctx context.Context) ([]*common.Selector, error)
}

type Config ¶ added in v0.12.0

type Config struct {
	Manager                       Manager
	Attestor                      Attestor
	AllowUnauthenticatedVerifiers bool
	AllowedForeignJWTClaims       map[string]struct{}
	TrustDomain                   spiffeid.TrustDomain
}

type Handler ¶

type Handler struct {
	workload.UnsafeSpiffeWorkloadAPIServer
	// contains filtered or unexported fields
}

Handler implements the Workload API interface

func New ¶ added in v0.12.0

func New(c Config) *Handler

func (*Handler) FetchJWTBundles ¶

func (h *Handler) FetchJWTBundles(_ *workload.JWTBundlesRequest, stream workload.SpiffeWorkloadAPI_FetchJWTBundlesServer) error

FetchJWTBundles processes request for JWT bundles

func (*Handler) FetchJWTSVID ¶

func (h *Handler) FetchJWTSVID(ctx context.Context, req *workload.JWTSVIDRequest) (resp *workload.JWTSVIDResponse, err error)

FetchJWTSVID processes request for a JWT-SVID. In case of multiple fetched SVIDs with same hint, the SVID that has the oldest associated entry will be returned.

func (*Handler) FetchX509Bundles ¶ added in v1.0.0

func (h *Handler) FetchX509Bundles(_ *workload.X509BundlesRequest, stream workload.SpiffeWorkloadAPI_FetchX509BundlesServer) error

FetchX509Bundles processes request for x509 bundles

func (*Handler) FetchX509SVID ¶

func (h *Handler) FetchX509SVID(_ *workload.X509SVIDRequest, stream workload.SpiffeWorkloadAPI_FetchX509SVIDServer) error

FetchX509SVID processes request for a x509 SVID. In case of multiple fetched SVIDs with same hint, the SVID that has the oldest associated entry will be returned.

func (*Handler) ValidateJWTSVID ¶

func (h *Handler) ValidateJWTSVID(ctx context.Context, req *workload.ValidateJWTSVIDRequest) (*workload.ValidateJWTSVIDResponse, error)

ValidateJWTSVID processes request for JWT-SVID validation

type Manager ¶ added in v0.12.0

type Manager interface {
	SubscribeToCacheChanges(ctx context.Context, key cache.Selectors) (cache.Subscriber, error)
	MatchingRegistrationEntries(selectors []*common.Selector) []*common.RegistrationEntry
	FetchJWTSVID(ctx context.Context, entry *common.RegistrationEntry, audience []string) (*client.JWTSVID, error)
	FetchWorkloadUpdate([]*common.Selector) *cache.WorkloadUpdate
}

Source Files ¶

View all Source files

handler.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL