creds

May 12, 2020

Changes in this version

+ const CertFileSuffix

+ const KeyBits

+ const KeyFileSuffix

+ const MaxValidForSeconds

+ const RsaKeyBits

+ func GenerateSubjectKeyId(pub crypto.PublicKey) ([]byte, error)

+ func RandomSerial() (*big.Int, error)

+ type Credentials struct

+ Certificate []byte

+ PrivateKey []byte

+ type EncodedUserKeyPair struct

+ PrivateKeyPEM []byte

+ PublicKeyPEM []byte

+ type Issuer struct

+ func NewFromConfig(role *api.RoleConfig, config *api.Config) (*Issuer, error)

+ func (i *Issuer) IssueFor(u *api.AuthInfo) ([]api.Cred, error)

+ type KubeIssuer struct

+ CACert *x509.Certificate

+ CACertEncoded string

+ CAKeypair *tls.Certificate

+ Clock clockwork.Clock

+ func NewKubeIssuer(certPem, keyPem []byte) (*KubeIssuer, error)

+ func (issuer *KubeIssuer) GenerateUserKeyPair(cn string, orgs []string, validForSeconds int) (*UserKeyPair, error)

+ type SSHIssuer struct

+ Clock clockwork.Clock

+ Random io.Reader

+ func (issuer *SSHIssuer) CreateSignedCertificate(ca ssh.Signer, publicKey ssh.PublicKey, privateKey *rsa.PrivateKey, ...) (*Credentials, error)

+ func (issuer *SSHIssuer) GenerateKeyPair(user *UserInfo) (ssh.PublicKey, *rsa.PrivateKey, error)

+ type STSIssuer struct

+ RoleArn string

+ STS stsiface.STSAPI

+ func NewSTSIssuer(STS stsiface.STSAPI, roleArn string) *STSIssuer

+ func (i *STSIssuer) IssueFor(u *api.AuthInfo) ([]api.Cred, error)

+ type UserInfo struct

+ Identity string

+ Principals []string

+ ValidForSeconds int

+ type UserKeyPair struct

+ PrivateKey []byte

+ PublicKey []byte

+ func (kp *UserKeyPair) Encode() *EncodedUserKeyPair