server

Documentation

Overview

Package server provides functionality so that other uses of sansshell can provide their own main.go without having to cargo-cult everything across for common use cases. i.e. adding additional modules that are locally defined.

Index

• func Run(ctx context.Context, opts ...Option)
• type Option
  • func WithAuthzHook(hook rpcauth.RPCAuthzHook) Option
  • func WithCredSource(credSource string) Option
  • func WithDebugPort(addr string) Option
  • func WithHostPort(hostport string) Option
  • func WithJustification(j bool) Option
  • func WithJustificationHook(hook func(string) error) Option
  • func WithLogger(l logr.Logger) Option
  • func WithOtelTracing(interceptorOpt otelgrpc.Option) Option
  • func WithPolicy(policy string) Option
  • func WithRawServerOption(s func(*grpc.Server)) Option
  • func WithStreamInterceptor(i grpc.StreamServerInterceptor) Option
  • func WithTlsConfig(tlsConfig *tls.Config) Option
  • func WithUnaryInterceptor(i grpc.UnaryServerInterceptor) Option

Functions

func Run

func Run(ctx context.Context, opts ...Option)

Run takes the given context and RunState and starts up a sansshell server. As this is intended to be called from main() it doesn't return errors and will instead exit on any errors.

Types

type Option

type Option interface {
	// contains filtered or unexported methods
}

func WithAuthzHook

func WithAuthzHook(hook rpcauth.RPCAuthzHook) Option

WithAuthzHook adds an additional authz hook to be applied to the server.

func WithCredSource

func WithCredSource(credSource string) Option

WithCredSource applies a registered credential source with the mtls package.

func WithDebugPort

func WithDebugPort(addr string) Option

WithDebugPort opens an additional port for a http debug page.

This is meant for humans. The format of the debug pages may change over time.

func WithHostPort

func WithHostPort(hostport string) Option

WithHostport applies the host:port to run the server.

func WithJustification

func WithJustification(j bool) Option

WithJustification applies the justification param. Justification if true requires justification to be set in the incoming RPC context Metadata (to the key defined in the telemetry package).

func WithJustificationHook

func WithJustificationHook(hook func(string) error) Option

WithJustificationFunc applies a justification function. This function will be called if Justication is true and a justification entry is found. The supplied function can then do any validation it wants in order to ensure it's compliant.

func WithLogger

func WithLogger(l logr.Logger) Option

WithLogger applies a logger that is used for all logging. A discard based one is used if none is supplied.

func WithOtelTracing

func WithOtelTracing(interceptorOpt otelgrpc.Option) Option

WithOtelTracing adds the OpenTelemetry gRPC interceptors to both stream and unary servers The interceptors collect and export tracing data for gRPC requests and responses

func WithPolicy

func WithPolicy(policy string) Option

WithPolicy applies an OPA policy used against incoming RPC requests.

func WithRawServerOption

func WithRawServerOption(s func(*grpc.Server)) Option

WithRawServerOption allows one access to the RPC Server object. Generally this is done to add additional registration functions for RPC services to be done before starting the server.

func WithStreamInterceptor

func WithStreamInterceptor(i grpc.StreamServerInterceptor) Option

WithStreamInterceptor adds an additional stream server interceptor. These become any additional interceptors to be added to streaming RPCs served from this instance. They will be added after logging and authz checks.

func WithTlsConfig

func WithTlsConfig(tlsConfig *tls.Config) Option

WithTlsConfig applies a supplied tls.Config object to the gRPC server.

func WithUnaryInterceptor

func WithUnaryInterceptor(i grpc.UnaryServerInterceptor) Option

WithUnaryInterceptor adds an additional unary server interceptor. These become any additional interceptors to be added to unary RPCs served from this instance. They will be added after logging and authz checks.