identity

Documentation

Index

• func RegisterIdentityServer(s *grpc.Server, srv IdentityServer)
• type CertifyRequest
  • func (*CertifyRequest) Descriptor() ([]byte, []int)
  • func (m *CertifyRequest) GetCertificateSigningRequest() []byte
  • func (m *CertifyRequest) GetIdentity() string
  • func (m *CertifyRequest) GetToken() []byte
  • func (*CertifyRequest) ProtoMessage()
  • func (m *CertifyRequest) Reset()
  • func (m *CertifyRequest) String() string
  • func (m *CertifyRequest) XXX_DiscardUnknown()
  • func (m *CertifyRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
  • func (dst *CertifyRequest) XXX_Merge(src proto.Message)
  • func (m *CertifyRequest) XXX_Size() int
  • func (m *CertifyRequest) XXX_Unmarshal(b []byte) error
• type CertifyResponse
  • func (*CertifyResponse) Descriptor() ([]byte, []int)
  • func (m *CertifyResponse) GetIntermediateCertificates() [][]byte
  • func (m *CertifyResponse) GetLeafCertificate() []byte
  • func (m *CertifyResponse) GetValidUntil() *timestamp.Timestamp
  • func (*CertifyResponse) ProtoMessage()
  • func (m *CertifyResponse) Reset()
  • func (m *CertifyResponse) String() string
  • func (m *CertifyResponse) XXX_DiscardUnknown()
  • func (m *CertifyResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
  • func (dst *CertifyResponse) XXX_Merge(src proto.Message)
  • func (m *CertifyResponse) XXX_Size() int
  • func (m *CertifyResponse) XXX_Unmarshal(b []byte) error
• type IdentityClient
  • func NewIdentityClient(cc *grpc.ClientConn) IdentityClient
• type IdentityServer

Functions

func RegisterIdentityServer

func RegisterIdentityServer(s *grpc.Server, srv IdentityServer)

Types

type CertifyRequest

type CertifyRequest struct {
	Identity string `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	// Proof of the requester's identity.
	//
	// In Kubernetes, for instance, this is the contents of a service account token.
	Token []byte `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
	// A PEM-encoded x509 Certificate Signing Request.
	CertificateSigningRequest []byte   `` /* 138-byte string literal not displayed */
	XXX_NoUnkeyedLiteral      struct{} `json:"-"`
	XXX_unrecognized          []byte   `json:"-"`
	XXX_sizecache             int32    `json:"-"`
}

func (*CertifyRequest) Descriptor

func (*CertifyRequest) Descriptor() ([]byte, []int)

func (*CertifyRequest) GetCertificateSigningRequest

func (m *CertifyRequest) GetCertificateSigningRequest() []byte

func (*CertifyRequest) GetIdentity

func (m *CertifyRequest) GetIdentity() string

func (*CertifyRequest) GetToken

func (m *CertifyRequest) GetToken() []byte

func (*CertifyRequest) ProtoMessage

func (*CertifyRequest) ProtoMessage()

func (*CertifyRequest) Reset

func (m *CertifyRequest) Reset()

func (*CertifyRequest) String

func (m *CertifyRequest) String() string

func (*CertifyRequest) XXX_DiscardUnknown

func (m *CertifyRequest) XXX_DiscardUnknown()

func (*CertifyRequest) XXX_Marshal

func (m *CertifyRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertifyRequest) XXX_Merge

func (dst *CertifyRequest) XXX_Merge(src proto.Message)

func (*CertifyRequest) XXX_Size

func (m *CertifyRequest) XXX_Size() int

func (*CertifyRequest) XXX_Unmarshal

func (m *CertifyRequest) XXX_Unmarshal(b []byte) error

type CertifyResponse

type CertifyResponse struct {
	// A PEM-encoded x509 Certificate.
	LeafCertificate []byte `protobuf:"bytes,1,opt,name=leaf_certificate,json=leafCertificate,proto3" json:"leaf_certificate,omitempty"`
	// A list of PEM-encoded x509 Certificates that establish the trust chain
	// between the leaf_certificate and the well-known trust anchors.
	IntermediateCertificates [][]byte             `` /* 133-byte string literal not displayed */
	ValidUntil               *timestamp.Timestamp `protobuf:"bytes,3,opt,name=valid_until,json=validUntil,proto3" json:"valid_until,omitempty"`
	XXX_NoUnkeyedLiteral     struct{}             `json:"-"`
	XXX_unrecognized         []byte               `json:"-"`
	XXX_sizecache            int32                `json:"-"`
}

func (*CertifyResponse) Descriptor

func (*CertifyResponse) Descriptor() ([]byte, []int)

func (*CertifyResponse) GetIntermediateCertificates

func (m *CertifyResponse) GetIntermediateCertificates() [][]byte

func (*CertifyResponse) GetLeafCertificate

func (m *CertifyResponse) GetLeafCertificate() []byte

func (*CertifyResponse) GetValidUntil

func (m *CertifyResponse) GetValidUntil() *timestamp.Timestamp

func (*CertifyResponse) ProtoMessage

func (*CertifyResponse) ProtoMessage()

func (*CertifyResponse) Reset

func (m *CertifyResponse) Reset()

func (*CertifyResponse) String

func (m *CertifyResponse) String() string

func (*CertifyResponse) XXX_DiscardUnknown

func (m *CertifyResponse) XXX_DiscardUnknown()

func (*CertifyResponse) XXX_Marshal

func (m *CertifyResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertifyResponse) XXX_Merge

func (dst *CertifyResponse) XXX_Merge(src proto.Message)

func (*CertifyResponse) XXX_Size

func (m *CertifyResponse) XXX_Size() int

func (*CertifyResponse) XXX_Unmarshal

func (m *CertifyResponse) XXX_Unmarshal(b []byte) error

type IdentityClient

type IdentityClient interface {
	// Requests that a time-bounded certificate be signed.
	//
	// The requester must provide a token that verifies the client's identity and
	// a Certificate Signing Request that adheres to the service naming rules.
	//
	// Errors are returned when the provided request is invalid or when
	// authentication cannot be performed.
	Certify(ctx context.Context, in *CertifyRequest, opts ...grpc.CallOption) (*CertifyResponse, error)
}

IdentityClient is the client API for Identity service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewIdentityClient

func NewIdentityClient(cc *grpc.ClientConn) IdentityClient

type IdentityServer

type IdentityServer interface {
	// Requests that a time-bounded certificate be signed.
	//
	// The requester must provide a token that verifies the client's identity and
	// a Certificate Signing Request that adheres to the service naming rules.
	//
	// Errors are returned when the provided request is invalid or when
	// authentication cannot be performed.
	Certify(context.Context, *CertifyRequest) (*CertifyResponse, error)
}

IdentityServer is the server API for Identity service.