awspca

package

v1.15.5 Latest Latest Go to latest Published: Oct 20, 2026 License: Apache-2.0 Imports: 26 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/spiffe/spire

Links

Open Source Insights

Documentation ¶

Index ¶

func BuiltIn() catalog.BuiltIn
type Configuration
type PCAClient
type PCAPlugin
- func New() *PCAPlugin

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func BuiltIn ¶

func BuiltIn() catalog.BuiltIn

Types ¶

type Configuration ¶ added in v1.0.0

type Configuration struct {
	Region                  string `hcl:"region" json:"region"`
	Endpoint                string `hcl:"endpoint" json:"endpoint"`
	CertificateAuthorityARN string `hcl:"certificate_authority_arn" json:"certificate_authority_arn"`
	SigningAlgorithm        string `hcl:"signing_algorithm" json:"signing_algorithm"`
	CASigningTemplateARN    string `hcl:"ca_signing_template_arn" json:"ca_signing_template_arn"`
	AssumeRoleARN           string `hcl:"assume_role_arn" json:"assume_role_arn"`
	SupplementalBundlePath  string `hcl:"supplemental_bundle_path" json:"supplemental_bundle_path"`
}

Configuration provides configuration context for the plugin

type PCAClient ¶

type PCAClient interface {
	DescribeCertificateAuthority(context.Context, *acmpca.DescribeCertificateAuthorityInput, ...func(*acmpca.Options)) (*acmpca.DescribeCertificateAuthorityOutput, error)
	IssueCertificate(context.Context, *acmpca.IssueCertificateInput, ...func(*acmpca.Options)) (*acmpca.IssueCertificateOutput, error)
	GetCertificate(context.Context, *acmpca.GetCertificateInput, ...func(*acmpca.Options)) (*acmpca.GetCertificateOutput, error)
}

PCAClient provides an interface which can be mocked to test the functionality of the plugin.

type PCAPlugin ¶

type PCAPlugin struct {
	upstreamauthorityv1.UnsafeUpstreamAuthorityServer
	configv1.UnsafeConfigServer
	// contains filtered or unexported fields
}

PCAPlugin is the main representation of this upstreamauthority plugin

func New ¶

func New() *PCAPlugin

New returns an instantiated plugin

func (*PCAPlugin) Configure ¶

func (p *PCAPlugin) Configure(ctx context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)

Configure sets up the plugin for use as an upstream authority

func (*PCAPlugin) MintX509CAAndSubscribe ¶ added in v1.0.0

func (p *PCAPlugin) MintX509CAAndSubscribe(request *upstreamauthorityv1.MintX509CARequest, stream upstreamauthorityv1.UpstreamAuthority_MintX509CAAndSubscribeServer) error

MintX509CA mints an X509CA by submitting the CSR to ACM to be signed by the certificate authority

func (*PCAPlugin) PublishJWTKeyAndSubscribe ¶ added in v1.0.0

func (*PCAPlugin) PublishJWTKeyAndSubscribe(*upstreamauthorityv1.PublishJWTKeyRequest, upstreamauthorityv1.UpstreamAuthority_PublishJWTKeyAndSubscribeServer) error

PublishJWTKey is not implemented by the wrapper and returns a codes.Unimplemented status

func (*PCAPlugin) SetLogger ¶

func (p *PCAPlugin) SetLogger(log hclog.Logger)

func (*PCAPlugin) SubscribeToLocalBundle ¶ added in v1.12.4

func (p *PCAPlugin) SubscribeToLocalBundle(req *upstreamauthorityv1.SubscribeToLocalBundleRequest, stream upstreamauthorityv1.UpstreamAuthority_SubscribeToLocalBundleServer) error

func (*PCAPlugin) Validate ¶ added in v1.11.0

func (p *PCAPlugin) Validate(ctx context.Context, req *configv1.ValidateRequest) (*configv1.ValidateResponse, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL