gateway

Documentation

Index

• Constants
• func CreateInsecureConnection(ctx context.Context, url string) (*ggrpc.ClientConn, error)
• func NewAPITokenServer(issuer string, signer jwt.JWTSigner, ...) api.APITokenServer
• func NewAuthServer(ctx context.Context, issuerURL string, oidcServer *auth.Server, ...) (*authServer, error)
• func NewAuthServerClient(ctx context.Context, gatewayAddr string) (*grpc.ClientConn, gateway.GatewayAuthClient, error)
• func NewClusterAuthAPIServer(issuer string, signer jwt.JWTSigner, ...) api.ClusterAuthServer
• func NewGatewayAPIServer(authConfig *auth.ClientConfig, client *auth.Client, server *auth.Server, ...) api.GatewayServer
• func NewOIDCProviderServer(oidcServer *auth.Server) *oidcProviderServer
• type OpenIdConfiguration

Constants

const (
	CACertPath = "/etc/pki/tls.crt"
)

Functions

func CreateInsecureConnection

func CreateInsecureConnection(ctx context.Context, url string) (*ggrpc.ClientConn, error)

func NewAPITokenServer

func NewAPITokenServer(
	issuer string,
	signer jwt.JWTSigner,
	userRepo repositories.ReadOnlyUserRepository,
) api.APITokenServer

func NewAuthServer

func NewAuthServer(ctx context.Context, issuerURL string, oidcServer *auth.Server, policiesPath string, roleBindingRepo repositories.UserRoleBindingRepository) (*authServer, error)

NewAuthServer creates a new instance of gateway.authServer.

func NewAuthServerClient

func NewAuthServerClient(ctx context.Context, gatewayAddr string) (*grpc.ClientConn, gateway.GatewayAuthClient, error)

func NewClusterAuthAPIServer

func NewClusterAuthAPIServer(
	issuer string,
	signer jwt.JWTSigner,
	clusterRepo repositories.ReadOnlyClusterRepository,
	validity map[string]time.Duration,
) api.ClusterAuthServer

func NewGatewayAPIServer

func NewGatewayAPIServer(authConfig *auth.ClientConfig, client *auth.Client, server *auth.Server, userRepo repositories.ReadOnlyUserRepository) api.GatewayServer

func NewOIDCProviderServer

func NewOIDCProviderServer(oidcServer *auth.Server) *oidcProviderServer

NewOIDCProviderServer creates a basic OIDC provider server

Types

type OpenIdConfiguration

type OpenIdConfiguration struct {
	Issuer  string `json:"issuer"`
	JwksURL string `json:"jwks_uri"`
}