auth

Documentation

Index

• Variables
• type MTLSConfig
  • func (cfg MTLSConfig) Flags(flags *pflag.FlagSet)

Variables

var Cell = cell.Module(
	"auth-manager",
	"Authenticates requests as demanded by policy",

	spire.Cell,

	cell.Invoke(newManager),
	cell.ProvidePrivate(
		newSignalRegistration,

		newNullAuthHandler,

		newMTLSAuthHandler,

		newAlwaysFailAuthHandler,
	),
	cell.Config(config{MeshAuthQueueSize: 1024}),
	cell.Config(MTLSConfig{}),
)

Cell invokes authManager which is responsible for request authentication. It does this by registering to "auth required" signals from the signal package and reacting upon received signal events. Actual authentication gets performed by an auth handler which is responsible for the configured auth type on the corresponding policy.

Types

type MTLSConfig

type MTLSConfig struct {
	MTLSListenerPort int `mapstructure:"mesh-auth-mtls-listener-port"`
}

func (MTLSConfig) Flags

func (cfg MTLSConfig) Flags(flags *pflag.FlagSet)