api

type Config struct {
	Log      logrus.FieldLogger
	Metrics  telemetry.Metrics
	Manager  manager.Manager
	Attestor workloadattestor.Attestor

	// AllowedReferenceTypesByCaller restricts which WorkloadReference type
	// URLs each authenticated caller (broker SPIFFE ID) may use and whether
	// each type is also allowed over TCP. A caller missing from the map has
	// no restriction over UDS, but remains denied over TCP.
	AllowedReferenceTypesByCaller map[spiffeid.ID]ReferenceTypePolicy
}

type ReferenceTypeAccess struct {
	AllowOverTCP bool
}

type ReferenceTypePolicy struct {
	AllowAny        bool
	AllowAnyOverTCP bool
	Types           map[string]ReferenceTypeAccess
}

type Service struct {
	broker.UnimplementedAPIServer
	// contains filtered or unexported fields
}