localauthority

package

v1.14.9 Latest Latest Go to latest Published: Oct 20, 2026 License: Apache-2.0 Imports: 15 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/spiffe/spire

Links

Open Source Insights

Documentation ¶

Index ¶

func RegisterService(s grpc.ServiceRegistrar, service *Service)
type CAManager
type Config
type Service
- func New(config Config) *Service

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func RegisterService ¶ added in v1.9.0

func RegisterService(s grpc.ServiceRegistrar, service *Service)

RegisterService registers the service on the gRPC server.

Types ¶

type CAManager ¶

type CAManager interface {
	// JWT
	GetCurrentJWTKeySlot() manager.Slot
	GetNextJWTKeySlot() manager.Slot
	PrepareJWTKey(ctx context.Context) error
	RotateJWTKey(ctx context.Context)
	IsJWTSVIDsDisabled() bool

	// X509
	GetCurrentX509CASlot() manager.Slot
	GetNextX509CASlot() manager.Slot
	PrepareX509CA(ctx context.Context) error
	RotateX509CA(ctx context.Context)

	IsUpstreamAuthority() bool
	NotifyTaintedX509Authority(ctx context.Context, authorityID string) error
}

type Config ¶

type Config struct {
	TrustDomain spiffeid.TrustDomain
	DataStore   datastore.DataStore
	CAManager   CAManager
}

Config is the service configuration

type Service ¶

type Service struct {
	localauthorityv1.UnsafeLocalAuthorityServer
	// contains filtered or unexported fields
}

Service implements the v1 LocalAuthority service

func New ¶

func New(config Config) *Service

New creates a new LocalAuthority service

func (*Service) ActivateJWTAuthority ¶

func (s *Service) ActivateJWTAuthority(ctx context.Context, req *localauthorityv1.ActivateJWTAuthorityRequest) (*localauthorityv1.ActivateJWTAuthorityResponse, error)

func (*Service) ActivateWITAuthority ¶ added in v1.14.0

func (s *Service) ActivateWITAuthority(ctx context.Context, req *localauthorityv1.ActivateWITAuthorityRequest) (*localauthorityv1.ActivateWITAuthorityResponse, error)

func (*Service) ActivateX509Authority ¶

func (s *Service) ActivateX509Authority(ctx context.Context, req *localauthorityv1.ActivateX509AuthorityRequest) (*localauthorityv1.ActivateX509AuthorityResponse, error)

func (*Service) GetJWTAuthorityState ¶

func (s *Service) GetJWTAuthorityState(ctx context.Context, _ *localauthorityv1.GetJWTAuthorityStateRequest) (*localauthorityv1.GetJWTAuthorityStateResponse, error)

func (*Service) GetWITAuthorityState ¶ added in v1.14.0

func (s *Service) GetWITAuthorityState(ctx context.Context, _ *localauthorityv1.GetWITAuthorityStateRequest) (*localauthorityv1.GetWITAuthorityStateResponse, error)

func (*Service) GetX509AuthorityState ¶

func (s *Service) GetX509AuthorityState(ctx context.Context, _ *localauthorityv1.GetX509AuthorityStateRequest) (*localauthorityv1.GetX509AuthorityStateResponse, error)

func (*Service) PrepareJWTAuthority ¶

func (s *Service) PrepareJWTAuthority(ctx context.Context, _ *localauthorityv1.PrepareJWTAuthorityRequest) (*localauthorityv1.PrepareJWTAuthorityResponse, error)

func (*Service) PrepareWITAuthority ¶ added in v1.14.0

func (s *Service) PrepareWITAuthority(ctx context.Context, _ *localauthorityv1.PrepareWITAuthorityRequest) (*localauthorityv1.PrepareWITAuthorityResponse, error)

func (*Service) PrepareX509Authority ¶

func (s *Service) PrepareX509Authority(ctx context.Context, _ *localauthorityv1.PrepareX509AuthorityRequest) (*localauthorityv1.PrepareX509AuthorityResponse, error)

func (*Service) RevokeJWTAuthority ¶

func (s *Service) RevokeJWTAuthority(ctx context.Context, req *localauthorityv1.RevokeJWTAuthorityRequest) (*localauthorityv1.RevokeJWTAuthorityResponse, error)

func (*Service) RevokeWITAuthority ¶ added in v1.14.0

func (s *Service) RevokeWITAuthority(ctx context.Context, req *localauthorityv1.RevokeWITAuthorityRequest) (*localauthorityv1.RevokeWITAuthorityResponse, error)

func (*Service) RevokeX509Authority ¶

func (s *Service) RevokeX509Authority(ctx context.Context, req *localauthorityv1.RevokeX509AuthorityRequest) (*localauthorityv1.RevokeX509AuthorityResponse, error)

func (*Service) RevokeX509UpstreamAuthority ¶ added in v1.10.2

func (s *Service) RevokeX509UpstreamAuthority(ctx context.Context, req *localauthorityv1.RevokeX509UpstreamAuthorityRequest) (*localauthorityv1.RevokeX509UpstreamAuthorityResponse, error)

func (*Service) TaintJWTAuthority ¶

func (s *Service) TaintJWTAuthority(ctx context.Context, req *localauthorityv1.TaintJWTAuthorityRequest) (*localauthorityv1.TaintJWTAuthorityResponse, error)

func (*Service) TaintWITAuthority ¶ added in v1.14.0

func (s *Service) TaintWITAuthority(ctx context.Context, req *localauthorityv1.TaintWITAuthorityRequest) (*localauthorityv1.TaintWITAuthorityResponse, error)

func (*Service) TaintX509Authority ¶

func (s *Service) TaintX509Authority(ctx context.Context, req *localauthorityv1.TaintX509AuthorityRequest) (*localauthorityv1.TaintX509AuthorityResponse, error)

func (*Service) TaintX509UpstreamAuthority ¶ added in v1.10.2

func (s *Service) TaintX509UpstreamAuthority(ctx context.Context, req *localauthorityv1.TaintX509UpstreamAuthorityRequest) (*localauthorityv1.TaintX509UpstreamAuthorityResponse, error)

Source Files ¶

View all Source files

service.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL