azure

Documentation

Index

• Constants
• Variables
• func FetchMSIToken(ctx context.Context, cl HTTPClient, resource string) (string, error)
• func MakeAgentID(td spiffeid.TrustDomain, agentPathTemplate *agentpathtemplate.Template, ...) (spiffeid.ID, error)
• type ComputeMetadata
• type HTTPClient
• type HTTPClientFunc
  • func (fn HTTPClientFunc) Do(req *http.Request) (*http.Response, error)
• type InstanceMetadata
  • func FetchInstanceMetadata(ctx context.Context, cl HTTPClient) (*InstanceMetadata, error)
• type MSIAttestationData
• type MSITokenClaims

Constants

const (
	// DefaultMSIResourceID is the default resource ID to use as the intended
	// audience of the MSI token. The current value is the service ID for the
	// Resource Manager API.
	DefaultMSIResourceID = "https://management.azure.com/"
	PluginName           = "azure_msi"
)

Variables

var DefaultAgentPathTemplate = agentpathtemplate.MustParse("/{{ .PluginName }}/{{ .TenantID }}/{{ .PrincipalID }}")

DefaultAgentPathTemplate is the default text/template

Functions

func FetchMSIToken

func FetchMSIToken(ctx context.Context, cl HTTPClient, resource string) (string, error)

func MakeAgentID

func MakeAgentID(td spiffeid.TrustDomain, agentPathTemplate *agentpathtemplate.Template, claims *MSITokenClaims) (spiffeid.ID, error)

Types

type ComputeMetadata

type ComputeMetadata struct {
	Name              string `json:"name"`
	SubscriptionID    string `json:"subscriptionId"`
	ResourceGroupName string `json:"resourceGroupName"`
}

type HTTPClient

type HTTPClient interface {
	Do(*http.Request) (*http.Response, error)
}

type HTTPClientFunc

type HTTPClientFunc func(*http.Request) (*http.Response, error)

func (HTTPClientFunc) Do

func (fn HTTPClientFunc) Do(req *http.Request) (*http.Response, error)

type InstanceMetadata

type InstanceMetadata struct {
	Compute ComputeMetadata `json:"compute"`
}

func FetchInstanceMetadata

func FetchInstanceMetadata(ctx context.Context, cl HTTPClient) (*InstanceMetadata, error)

type MSIAttestationData

type MSIAttestationData struct {
	Token string `json:"token"`
}

type MSITokenClaims

type MSITokenClaims struct {
	jwt.Claims
	TenantID    string `json:"tid,omitempty"`
	PrincipalID string `json:"sub,omitempty"`
}