gen

Documentation

Overview

Package gen is adopted from the real Talos.

Index

• type LocalGenerator
  • func NewLocalGenerator(caKey, caCrt []byte) (g *LocalGenerator, err error)
  • func (g *LocalGenerator) Identity(csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)
• type RemoteGenerator
  • func NewRemoteGenerator(dialer func(ctx context.Context, addr string) (net.Conn, error), token string, ...) (g *RemoteGenerator, err error)
  • func (g *RemoteGenerator) Close() error
  • func (g *RemoteGenerator) Identity(csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)
  • func (g *RemoteGenerator) IdentityContext(ctx context.Context, csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

Types

type LocalGenerator

type LocalGenerator struct {
	// contains filtered or unexported fields
}

LocalGenerator represents the OS identity generator.

func NewLocalGenerator

func NewLocalGenerator(caKey, caCrt []byte) (g *LocalGenerator, err error)

NewLocalGenerator initializes a LocalGenerator.

func (*LocalGenerator) Identity

func (g *LocalGenerator) Identity(csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

Identity creates an identity certificate using a local root CA.

type RemoteGenerator

type RemoteGenerator struct {
	// contains filtered or unexported fields
}

RemoteGenerator represents the OS identity generator.

func NewRemoteGenerator

func NewRemoteGenerator(dialer func(ctx context.Context, addr string) (net.Conn, error), token string, endpoints []string, acceptedCAs []*x509.PEMEncodedCertificate) (g *RemoteGenerator, err error)

NewRemoteGenerator initializes a RemoteGenerator with a preconfigured grpc.ClientConn.

func (*RemoteGenerator) Close

func (g *RemoteGenerator) Close() error

Close closes the gRPC client connection.

func (*RemoteGenerator) Identity

func (g *RemoteGenerator) Identity(csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

Identity creates an identity certificate via the security API.

func (*RemoteGenerator) IdentityContext

func (g *RemoteGenerator) IdentityContext(ctx context.Context, csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

IdentityContext creates an identity certificate via the security API.