v1

Documentation

Index

• Variables
• func RegisterWorkloadAttestorServer(s grpc.ServiceRegistrar, srv WorkloadAttestorServer)
• func WorkloadAttestorPluginServer(server WorkloadAttestorServer) pluginsdk.PluginServer
• type AttestRequest
  • func (*AttestRequest) Descriptor() ([]byte, []int)
  • func (x *AttestRequest) GetPid() int32
  • func (*AttestRequest) ProtoMessage()
  • func (x *AttestRequest) ProtoReflect() protoreflect.Message
  • func (x *AttestRequest) Reset()
  • func (x *AttestRequest) String() string
• type AttestResponse
  • func (*AttestResponse) Descriptor() ([]byte, []int)
  • func (x *AttestResponse) GetSelectorValues() []string
  • func (*AttestResponse) ProtoMessage()
  • func (x *AttestResponse) ProtoReflect() protoreflect.Message
  • func (x *AttestResponse) Reset()
  • func (x *AttestResponse) String() string
• type UnimplementedWorkloadAttestorServer
  • func (UnimplementedWorkloadAttestorServer) Attest(context.Context, *AttestRequest) (*AttestResponse, error)
• type UnsafeWorkloadAttestorServer
• type WorkloadAttestorClient
  • func NewWorkloadAttestorClient(cc grpc.ClientConnInterface) WorkloadAttestorClient
• type WorkloadAttestorPluginClient
  • func (c *WorkloadAttestorPluginClient) GRPCServiceName() string
  • func (c *WorkloadAttestorPluginClient) InitClient(conn grpc.ClientConnInterface) interface{}
  • func (c *WorkloadAttestorPluginClient) IsInitialized() bool
  • func (s WorkloadAttestorPluginClient) Type() string
• type WorkloadAttestorServer

Variables

var File_spire_plugin_agent_workloadattestor_v1_workloadattestor_proto protoreflect.FileDescriptor

var WorkloadAttestor_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "spire.plugin.agent.workloadattestor.v1.WorkloadAttestor",
	HandlerType: (*WorkloadAttestorServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "Attest",
			Handler:    _WorkloadAttestor_Attest_Handler,
		},
	},
	Streams:  []grpc.StreamDesc{},
	Metadata: "spire/plugin/agent/workloadattestor/v1/workloadattestor.proto",
}

WorkloadAttestor_ServiceDesc is the grpc.ServiceDesc for WorkloadAttestor service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterWorkloadAttestorServer

func RegisterWorkloadAttestorServer(s grpc.ServiceRegistrar, srv WorkloadAttestorServer)

func WorkloadAttestorPluginServer

func WorkloadAttestorPluginServer(server WorkloadAttestorServer) pluginsdk.PluginServer

Types

type AttestRequest

type AttestRequest struct {

	// Required. The process ID of the workload to attest.
	Pid int32 `protobuf:"varint,1,opt,name=pid,proto3" json:"pid,omitempty"`
	// contains filtered or unexported fields
}

func (*AttestRequest) Descriptor

func (*AttestRequest) Descriptor() ([]byte, []int)

Deprecated: Use AttestRequest.ProtoReflect.Descriptor instead.

func (*AttestRequest) GetPid

func (x *AttestRequest) GetPid() int32

func (*AttestRequest) ProtoMessage

func (*AttestRequest) ProtoMessage()

func (*AttestRequest) ProtoReflect

func (x *AttestRequest) ProtoReflect() protoreflect.Message

func (*AttestRequest) Reset

func (x *AttestRequest) Reset()

func (*AttestRequest) String

func (x *AttestRequest) String() string

type AttestResponse

type AttestResponse struct {

	// Optional. Selector values related to the attested workload. The type
	// of the selector is inferred from the plugin name.
	SelectorValues []string `protobuf:"bytes,1,rep,name=selector_values,json=selectorValues,proto3" json:"selector_values,omitempty"`
	// contains filtered or unexported fields
}

func (*AttestResponse) Descriptor

func (*AttestResponse) Descriptor() ([]byte, []int)

Deprecated: Use AttestResponse.ProtoReflect.Descriptor instead.

func (*AttestResponse) GetSelectorValues

func (x *AttestResponse) GetSelectorValues() []string

func (*AttestResponse) ProtoMessage

func (*AttestResponse) ProtoMessage()

func (*AttestResponse) ProtoReflect

func (x *AttestResponse) ProtoReflect() protoreflect.Message

func (*AttestResponse) Reset

func (x *AttestResponse) Reset()

func (*AttestResponse) String

func (x *AttestResponse) String() string

type UnimplementedWorkloadAttestorServer

type UnimplementedWorkloadAttestorServer struct {
}

UnimplementedWorkloadAttestorServer must be embedded to have forward compatible implementations.

func (UnimplementedWorkloadAttestorServer) Attest

func (UnimplementedWorkloadAttestorServer) Attest(context.Context, *AttestRequest) (*AttestResponse, error)

type UnsafeWorkloadAttestorServer

type UnsafeWorkloadAttestorServer interface {
	// contains filtered or unexported methods
}

UnsafeWorkloadAttestorServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to WorkloadAttestorServer will result in compilation errors.

type WorkloadAttestorClient

type WorkloadAttestorClient interface {
	// Attests the specified workload process. If the process is not one the
	// attestor is in a position to attest (e.g. k8s attestor attesting a
	// non-k8s workload), the call will succeed but return no selectors. If the
	// process is one the attestor is in a position to attest, but the attestor
	// fails to gather all selectors related to that workload, the call will
	// fail. Otherwise the attestor will return one or more workload selectors.
	Attest(ctx context.Context, in *AttestRequest, opts ...grpc.CallOption) (*AttestResponse, error)
}

WorkloadAttestorClient is the client API for WorkloadAttestor service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

func NewWorkloadAttestorClient

func NewWorkloadAttestorClient(cc grpc.ClientConnInterface) WorkloadAttestorClient

type WorkloadAttestorPluginClient

type WorkloadAttestorPluginClient struct {
	WorkloadAttestorClient
}

func (*WorkloadAttestorPluginClient) GRPCServiceName

func (c *WorkloadAttestorPluginClient) GRPCServiceName() string

func (*WorkloadAttestorPluginClient) InitClient

func (c *WorkloadAttestorPluginClient) InitClient(conn grpc.ClientConnInterface) interface{}

func (*WorkloadAttestorPluginClient) IsInitialized

func (c *WorkloadAttestorPluginClient) IsInitialized() bool

func (WorkloadAttestorPluginClient) Type

func (s WorkloadAttestorPluginClient) Type() string

type WorkloadAttestorServer

type WorkloadAttestorServer interface {
	// Attests the specified workload process. If the process is not one the
	// attestor is in a position to attest (e.g. k8s attestor attesting a
	// non-k8s workload), the call will succeed but return no selectors. If the
	// process is one the attestor is in a position to attest, but the attestor
	// fails to gather all selectors related to that workload, the call will
	// fail. Otherwise the attestor will return one or more workload selectors.
	Attest(context.Context, *AttestRequest) (*AttestResponse, error)
	// contains filtered or unexported methods
}

WorkloadAttestorServer is the server API for WorkloadAttestor service. All implementations must embed UnimplementedWorkloadAttestorServer for forward compatibility