common

Documentation

Index

• type AccessToken
• type BundleUpdates
• type BundlesDigests
• type Member
• type PostBundleRequest
• type Relationship
• type SyncBundleRequest
• type SyncBundleResponse
• type TrustBundle

Types

type AccessToken

type AccessToken struct {
	MemberID    uuid.UUID
	TrustDomain spiffeid.TrustDomain

	Token  string
	Expiry time.Time
}

type BundleUpdates

type BundleUpdates map[spiffeid.TrustDomain]TrustBundle

BundleUpdates is a map of trust bundles keyed by trust domain.

type BundlesDigests

type BundlesDigests map[spiffeid.TrustDomain][]byte

BundlesDigests is a map of trust bundle digests keyed by trust domain.

type Member

type Member struct {
	ID uuid.UUID

	Name string
	TrustBundle
}

type PostBundleRequest

type PostBundleRequest struct {
	// TrustBundle is the latest watched SPIRE Server trust bundle.
	TrustBundle `json:"state"`
}

PostBundleRequest represents the request to submit the local SPIRE Server's bundle.

type Relationship

type Relationship struct {
	ID uuid.UUID

	MemberA *Member
	MemberB *Member
}

type SyncBundleRequest

type SyncBundleRequest struct {
	State BundlesDigests `json:"state"`
}

SyncBundleRequest represents a request to send the current state of federated bundles digests.

type SyncBundleResponse

type SyncBundleResponse struct {
	// Update conveys trust bundles that are new or updates.
	Updates BundleUpdates `json:"updates"`

	// State is the current source-of-truth map of all trust bundles.
	// It essentially allows triggering deletions of trust bundles on harvesters.
	State BundlesDigests `json:"state"`
}

SyncBundleResponse represents a response from Galadriel Server containing the federated trust bundles updates.

type TrustBundle

type TrustBundle struct {
	// Trust Domain of the bundle
	TrustDomain spiffeid.TrustDomain `json:"trust_domain"`
	// SPIFFE bundle according to the SPIFFE Trust Domain and Bundle specification.
	// https://github.com/spiffe/spiffe/blob/main/standards/SPIFFE_Trust_Domain_and_Bundle.md#4-spiffe-bundle-format
	Bundle []byte `json:"trust_bundle"`
	// SHA3-256 digest of the PEM-encoded X.509 bundle certificate blocks.
	BundleDigest []byte `json:"bundle_digest"`
}

TrustBundle represents a SPIFFE Trust bundle along with its digest.