spiffe

Documentation

Index

• type Options
• type RequestSVIDFn
• type SPIFFE
  • func New(opts Options) *SPIFFE
  • func (s *SPIFFE) Ready(ctx context.Context) error
  • func (s *SPIFFE) Run(ctx context.Context) error
  • func (s *SPIFFE) SVIDSource() x509svid.Source

Types

type Options

type Options struct {
	Log           logger.Logger
	RequestSVIDFn RequestSVIDFn

	// WriteIdentityToFile is used to write the identity private key and
	// certificate chain to file. The certificate chain and private key will be
	// written to the `tls.cert` and `tls.key` files respectively in the given
	// directory.
	WriteIdentityToFile *string

	TrustAnchors trustanchors.Interface
}

type RequestSVIDFn

type RequestSVIDFn func(context.Context, []byte) ([]*x509.Certificate, error)

type SPIFFE

type SPIFFE struct {
	// contains filtered or unexported fields
}

SPIFFE is a readable/writeable store of a SPIFFE X.509 SVID. Used to manage a workload SVID, and share read-only interfaces to consumers.

func New

func New(opts Options) *SPIFFE

func (*SPIFFE) Ready

func (s *SPIFFE) Ready(ctx context.Context) error

Ready blocks until SPIFFE is ready or the context is done which will return the context error.

func (*SPIFFE) Run

func (s *SPIFFE) Run(ctx context.Context) error

func (*SPIFFE) SVIDSource

func (s *SPIFFE) SVIDSource() x509svid.Source