endpoints

type Config struct {
	BindAddr net.Addr

	Attestor attestor.Attestor

	Manager manager.Manager

	Log logrus.FieldLogger

	Metrics telemetry.Metrics

	// The TLS Certificate resource name to use for the default X509-SVID with Envoy SDS
	DefaultSVIDName string

	// The Validation Context resource name to use when fetching X.509 bundle together with federated bundles with Envoy SDS
	DefaultAllBundlesName string

	// The Validation Context resource name to use for the default X.509 bundle with Envoy SDS
	DefaultBundleName string

	// Disable custom Envoy SDS validator
	DisableSPIFFECertValidation bool

	AllowUnauthenticatedVerifiers bool

	AllowedForeignJWTClaims []string

	LogSelectors []string

	TrustDomain spiffeid.TrustDomain

	// WorkloadAPIRateLimit configures per-selector-set rate limiting for Workload API and SDS methods.
	WorkloadAPIRateLimit WorkloadAPIRateLimitConfig
	// contains filtered or unexported fields
}

type Endpoints struct {
	// contains filtered or unexported fields
}

type PeerTrackerAttestor struct {
	Attestor attestor.Attestor
}

type Server interface {
	ListenAndServe(ctx context.Context) error
	WaitForListening(listening chan struct{})
}

type WorkloadAPIRateLimitConfig struct {
	FetchX509SVID    int
	FetchJWTSVID     int
	FetchX509Bundles int
	FetchJWTBundles  int
	StreamSecrets    int
	FetchSecrets     int
}

type WorkloadRateLimiter struct {
	// contains filtered or unexported fields
}