auth

Documentation

Index

• Variables
• type MTLSConfig
  • func (cfg MTLSConfig) Flags(flags *pflag.FlagSet)
• type Manager

Variables

var Cell = cell.Module(
	"auth-manager",
	"Authenticates requests as demanded by policy",

	spire.Cell,

	cell.Provide(newManager),
	cell.ProvidePrivate(

		newNullAuthHandler,

		newAuthMapAuthenticator,

		newMTLSAuthHandler,

		newAlwaysFailAuthHandler,
	),
	cell.Config(config{MeshAuthMonitorQueueSize: 1024}),
	cell.Config(MTLSConfig{}),
)

Cell provides the auth.Manager which is responsible for request authentication. It does this, by implementing consumer.MonitorConsumer and reacting upon monitor.DropNotify events with reason flow.DropReason_AUTH_REQUIRED. The actual authentication gets performed by an auth handler which is responsible for the configured auth type on the corresponding policy.

Types

type MTLSConfig

type MTLSConfig struct {
	MTLSListenerPort int `mapstructure:"mesh-auth-mtls-listener-port"`
}

func (MTLSConfig) Flags

func (cfg MTLSConfig) Flags(flags *pflag.FlagSet)

type Manager

type Manager interface {
	consumer.MonitorConsumer
}