auth

Documentation

Overview

Package auth provides routines to manage mutual authentication identities in Cilium. If enabled, the operator will watch for CiliumIdentity resources and provision corresponding external identities such as SPIFFE identities.

Index

• Variables
• type Config
  • func (cfg Config) Flags(flags *pflag.FlagSet)
• type IdentityWatcher

Variables

var Cell = cell.Module(
	"auth-identity",
	"Cilium Mutual Authentication Identity management",
	spire.Cell,
	cell.Config(Config{}),
	cell.Invoke(registerIdentityWatcher),
)

Types

type Config

type Config struct {
	Enabled bool `mapstructure:"mesh-auth-mutual-enabled"`
}

Config contains the configuration for the identity-gc.

func (Config) Flags

func (cfg Config) Flags(flags *pflag.FlagSet)

Flags implements cell.Flagger interface.

type IdentityWatcher

type IdentityWatcher struct {
	// contains filtered or unexported fields
}

IdentityWatcher represents the Cilium identities watcher. It watches for Cilium identities and upserts or deletes them in Spire.