spire

Documentation

Index

• Variables
• type SpireDelegateClient
  • func (s *SpireDelegateClient) GetCertificateForIdentity(id identity.NumericIdentity) (*tls.Certificate, error)
  • func (s *SpireDelegateClient) GetTrustBundle() (*x509.CertPool, error)
  • func (s *SpireDelegateClient) NumericIdentityToSNI(id identity.NumericIdentity) string
  • func (s *SpireDelegateClient) SNIToNumericIdentity(sni string) (identity.NumericIdentity, error)
  • func (s *SpireDelegateClient) Status() *models.Status
  • func (s *SpireDelegateClient) SubscribeToRotatedIdentities() <-chan certs.CertificateRotationEvent
  • func (s *SpireDelegateClient) ValidateIdentity(id identity.NumericIdentity, cert *x509.Certificate) (bool, error)
• type SpireDelegateConfig
  • func (cfg SpireDelegateConfig) Flags(flags *pflag.FlagSet)

Variables

var Cell = cell.Module(
	"spire-delegate",
	"Spire Delegate API Client",
	cell.Provide(newSpireDelegateClient),
	cell.Config(SpireDelegateConfig{}),
)

Types

type SpireDelegateClient

type SpireDelegateClient struct {
	// contains filtered or unexported fields
}

func (*SpireDelegateClient) GetCertificateForIdentity

func (s *SpireDelegateClient) GetCertificateForIdentity(id identity.NumericIdentity) (*tls.Certificate, error)

func (*SpireDelegateClient) GetTrustBundle

func (s *SpireDelegateClient) GetTrustBundle() (*x509.CertPool, error)

func (*SpireDelegateClient) NumericIdentityToSNI

func (s *SpireDelegateClient) NumericIdentityToSNI(id identity.NumericIdentity) string

func (*SpireDelegateClient) SNIToNumericIdentity

func (s *SpireDelegateClient) SNIToNumericIdentity(sni string) (identity.NumericIdentity, error)

func (*SpireDelegateClient) Status

func (s *SpireDelegateClient) Status() *models.Status

func (*SpireDelegateClient) SubscribeToRotatedIdentities

func (s *SpireDelegateClient) SubscribeToRotatedIdentities() <-chan certs.CertificateRotationEvent

func (*SpireDelegateClient) ValidateIdentity

func (s *SpireDelegateClient) ValidateIdentity(id identity.NumericIdentity, cert *x509.Certificate) (bool, error)

type SpireDelegateConfig

type SpireDelegateConfig struct {
	SpireAdminSocketPath string `mapstructure:"mesh-auth-spire-admin-socket"`
	SpiffeTrustDomain    string `mapstructure:"mesh-auth-spiffe-trust-domain"`
	RotatedQueueSize     int    `mapstructure:"mesh-auth-rotated-identities-queue-size"`
}

func (SpireDelegateConfig) Flags

func (cfg SpireDelegateConfig) Flags(flags *pflag.FlagSet)