Documentation
¶
Index ¶
- Constants
- Variables
- func Builder() providers.Builder
- type Provider
- func (p *Provider) BeginAuth(_ context.Context, _ types.AuthContext) (types.AuthSession, error)
- func (p *Provider) Capabilities() types.ProviderCapabilities
- func (p *Provider) ClientDescriptors() []types.ClientDescriptor
- func (p *Provider) Mint(ctx context.Context, subject types.CredentialSubject) (types.CredentialPayload, error)
- func (p *Provider) Operations() []types.OperationDescriptor
- func (p *Provider) Type() types.ProviderType
Constants ¶
View Source
const ( OperationHealthDefault types.OperationName = "health.default" OperationCollectFindings types.OperationName = "findings.collect" OperationScanSettings types.OperationName = "settings.scan" )
Operation names published by the GCP SCC provider.
View Source
const ClientSecurityCenter types.ClientName = "securitycenter.v2"
ClientSecurityCenter identifies the SCC client descriptor.
View Source
const TypeGCPSCC = types.ProviderType("gcp_scc")
TypeGCPSCC identifies the GCP Security Command Center provider.
Variables ¶
View Source
var ( // ErrSecurityCenterClientRequired indicates the security center client was not provided or is invalid ErrSecurityCenterClientRequired = errors.New("gcpscc: security center client required") // ErrBeginAuthNotSupported indicates BeginAuth is not supported for GCP SCC providers ErrBeginAuthNotSupported = errors.New("gcpscc: BeginAuth is not supported; supply metadata via credential schema") )
Functions ¶
Types ¶
type Provider ¶
type Provider struct {
// contains filtered or unexported fields
}
Provider implements the GCP SCC integration using workload identity federation.
func (*Provider) BeginAuth ¶
func (p *Provider) BeginAuth(_ context.Context, _ types.AuthContext) (types.AuthSession, error)
BeginAuth is not applicable for workload identity flows; callers should rely on declarative metadata.
func (*Provider) Capabilities ¶
func (p *Provider) Capabilities() types.ProviderCapabilities
Capabilities returns the provider capabilities.
func (*Provider) ClientDescriptors ¶
func (p *Provider) ClientDescriptors() []types.ClientDescriptor
ClientDescriptors returns the client builders exposed by this provider.
func (*Provider) Mint ¶
func (p *Provider) Mint(ctx context.Context, subject types.CredentialSubject) (types.CredentialPayload, error)
Mint exchanges stored workload identity metadata for short-lived Google credentials and persists the updated payload.
func (*Provider) Operations ¶
func (p *Provider) Operations() []types.OperationDescriptor
Operations returns the provider operations published by GCP SCC.
func (*Provider) Type ¶
func (p *Provider) Type() types.ProviderType
Type returns the provider identifier.
Source Files
Click to show internal directories.
Click to hide internal directories.