trustv1

Documentation

Index

• type Service
  • func NewService(cfg *ServiceConfig) (*Service, error)
  • func (s *Service) DeleteCertAuthority(ctx context.Context, req *trustpb.DeleteCertAuthorityRequest) (*emptypb.Empty, error)
  • func (s *Service) GenerateHostCert(ctx context.Context, req *trustpb.GenerateHostCertRequest) (*trustpb.GenerateHostCertResponse, error)
  • func (s *Service) GetCertAuthorities(ctx context.Context, req *trustpb.GetCertAuthoritiesRequest) (*trustpb.GetCertAuthoritiesResponse, error)
  • func (s *Service) GetCertAuthority(ctx context.Context, req *trustpb.GetCertAuthorityRequest) (*types.CertAuthorityV2, error)
  • func (s *Service) RotateCertAuthority(ctx context.Context, req *trustpb.RotateCertAuthorityRequest) (*trustpb.RotateCertAuthorityResponse, error)
  • func (s *Service) RotateExternalCertAuthority(ctx context.Context, req *trustpb.RotateExternalCertAuthorityRequest) (*trustpb.RotateExternalCertAuthorityResponse, error)
  • func (s *Service) UpsertCertAuthority(ctx context.Context, req *trustpb.UpsertCertAuthorityRequest) (*types.CertAuthorityV2, error)
• type ServiceConfig

Types

type Service

type Service struct {
	trustpb.UnimplementedTrustServiceServer
	// contains filtered or unexported fields
}

Service implements the teleport.trust.v1.TrustService RPC service.

func NewService

func NewService(cfg *ServiceConfig) (*Service, error)

NewService returns a new trust gRPC service.

func (*Service) DeleteCertAuthority

func (s *Service) DeleteCertAuthority(ctx context.Context, req *trustpb.DeleteCertAuthorityRequest) (*emptypb.Empty, error)

DeleteCertAuthority deletes the matching cert authority.

func (*Service) GenerateHostCert

func (s *Service) GenerateHostCert(
	ctx context.Context, req *trustpb.GenerateHostCertRequest,
) (*trustpb.GenerateHostCertResponse, error)

GenerateHostCert takes a public key in the OpenSSH `authorized_keys` format and returns a SSH certificate signed by the Host CA.

func (*Service) GetCertAuthorities

func (s *Service) GetCertAuthorities(ctx context.Context, req *trustpb.GetCertAuthoritiesRequest) (*trustpb.GetCertAuthoritiesResponse, error)

GetCertAuthorities retrieves the cert authorities with the specified type.

func (*Service) GetCertAuthority

func (s *Service) GetCertAuthority(ctx context.Context, req *trustpb.GetCertAuthorityRequest) (*types.CertAuthorityV2, error)

GetCertAuthority retrieves the matching certificate authority.

func (*Service) RotateCertAuthority

func (s *Service) RotateCertAuthority(ctx context.Context, req *trustpb.RotateCertAuthorityRequest) (*trustpb.RotateCertAuthorityResponse, error)

RotateCertAuthority rotates a cert authority.

func (*Service) RotateExternalCertAuthority

func (s *Service) RotateExternalCertAuthority(ctx context.Context, req *trustpb.RotateExternalCertAuthorityRequest) (*trustpb.RotateExternalCertAuthorityResponse, error)

RotateExternalCertAuthority rotates external certificate authority, this method is called by remote trusted cluster and is used to update only public keys and certificates of the certificate authority.

func (*Service) UpsertCertAuthority

func (s *Service) UpsertCertAuthority(ctx context.Context, req *trustpb.UpsertCertAuthorityRequest) (*types.CertAuthorityV2, error)

UpsertCertAuthority creates or updates the provided cert authority.

type ServiceConfig

type ServiceConfig struct {
	Authorizer authz.Authorizer
	Cache      services.AuthorityGetter
	Backend    services.Trust
	Logger     *logrus.Entry
	AuthServer authServer
}

ServiceConfig holds configuration options for the trust gRPC service.