Documentation
¶
Index ¶
- type AttestationData
- func (*AttestationData) Descriptor() ([]byte, []int)
- func (m *AttestationData) GetData() []byte
- func (m *AttestationData) GetType() string
- func (*AttestationData) ProtoMessage()
- func (m *AttestationData) Reset()
- func (m *AttestationData) String() string
- func (m *AttestationData) XXX_DiscardUnknown()
- func (m *AttestationData) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *AttestationData) XXX_Merge(src proto.Message)
- func (m *AttestationData) XXX_Size() int
- func (m *AttestationData) XXX_Unmarshal(b []byte) error
- type AttestedNode
- func (*AttestedNode) Descriptor() ([]byte, []int)
- func (m *AttestedNode) GetAttestationDataType() string
- func (m *AttestedNode) GetCertNotAfter() int64
- func (m *AttestedNode) GetCertSerialNumber() string
- func (m *AttestedNode) GetNewCertNotAfter() int64
- func (m *AttestedNode) GetNewCertSerialNumber() string
- func (m *AttestedNode) GetSpiffeId() string
- func (*AttestedNode) ProtoMessage()
- func (m *AttestedNode) Reset()
- func (m *AttestedNode) String() string
- func (m *AttestedNode) XXX_DiscardUnknown()
- func (m *AttestedNode) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *AttestedNode) XXX_Merge(src proto.Message)
- func (m *AttestedNode) XXX_Size() int
- func (m *AttestedNode) XXX_Unmarshal(b []byte) error
- type Bundle
- func (*Bundle) Descriptor() ([]byte, []int)
- func (m *Bundle) GetJwtSigningKeys() []*PublicKey
- func (m *Bundle) GetRefreshHint() int64
- func (m *Bundle) GetRootCas() []*Certificate
- func (m *Bundle) GetTrustDomainId() string
- func (*Bundle) ProtoMessage()
- func (m *Bundle) Reset()
- func (m *Bundle) String() string
- func (m *Bundle) XXX_DiscardUnknown()
- func (m *Bundle) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Bundle) XXX_Merge(src proto.Message)
- func (m *Bundle) XXX_Size() int
- func (m *Bundle) XXX_Unmarshal(b []byte) error
- type Certificate
- func (*Certificate) Descriptor() ([]byte, []int)
- func (m *Certificate) GetDerBytes() []byte
- func (*Certificate) ProtoMessage()
- func (m *Certificate) Reset()
- func (m *Certificate) String() string
- func (m *Certificate) XXX_DiscardUnknown()
- func (m *Certificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Certificate) XXX_Merge(src proto.Message)
- func (m *Certificate) XXX_Size() int
- func (m *Certificate) XXX_Unmarshal(b []byte) error
- type Empty
- func (*Empty) Descriptor() ([]byte, []int)
- func (*Empty) ProtoMessage()
- func (m *Empty) Reset()
- func (m *Empty) String() string
- func (m *Empty) XXX_DiscardUnknown()
- func (m *Empty) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Empty) XXX_Merge(src proto.Message)
- func (m *Empty) XXX_Size() int
- func (m *Empty) XXX_Unmarshal(b []byte) error
- type PublicKey
- func (*PublicKey) Descriptor() ([]byte, []int)
- func (m *PublicKey) GetKid() string
- func (m *PublicKey) GetNotAfter() int64
- func (m *PublicKey) GetPkixBytes() []byte
- func (*PublicKey) ProtoMessage()
- func (m *PublicKey) Reset()
- func (m *PublicKey) String() string
- func (m *PublicKey) XXX_DiscardUnknown()
- func (m *PublicKey) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *PublicKey) XXX_Merge(src proto.Message)
- func (m *PublicKey) XXX_Size() int
- func (m *PublicKey) XXX_Unmarshal(b []byte) error
- type RegistrationEntries
- func (*RegistrationEntries) Descriptor() ([]byte, []int)
- func (m *RegistrationEntries) GetEntries() []*RegistrationEntry
- func (*RegistrationEntries) ProtoMessage()
- func (m *RegistrationEntries) Reset()
- func (m *RegistrationEntries) String() string
- func (m *RegistrationEntries) XXX_DiscardUnknown()
- func (m *RegistrationEntries) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *RegistrationEntries) XXX_Merge(src proto.Message)
- func (m *RegistrationEntries) XXX_Size() int
- func (m *RegistrationEntries) XXX_Unmarshal(b []byte) error
- type RegistrationEntry
- func (*RegistrationEntry) Descriptor() ([]byte, []int)
- func (m *RegistrationEntry) GetAdmin() bool
- func (m *RegistrationEntry) GetDnsNames() []string
- func (m *RegistrationEntry) GetDownstream() bool
- func (m *RegistrationEntry) GetEntryExpiry() int64
- func (m *RegistrationEntry) GetEntryId() string
- func (m *RegistrationEntry) GetFederatesWith() []string
- func (m *RegistrationEntry) GetParentId() string
- func (m *RegistrationEntry) GetSelectors() []*Selector
- func (m *RegistrationEntry) GetSpiffeId() string
- func (m *RegistrationEntry) GetTtl() int32
- func (*RegistrationEntry) ProtoMessage()
- func (m *RegistrationEntry) Reset()
- func (m *RegistrationEntry) String() string
- func (m *RegistrationEntry) XXX_DiscardUnknown()
- func (m *RegistrationEntry) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *RegistrationEntry) XXX_Merge(src proto.Message)
- func (m *RegistrationEntry) XXX_Size() int
- func (m *RegistrationEntry) XXX_Unmarshal(b []byte) error
- type Selector
- func (*Selector) Descriptor() ([]byte, []int)
- func (m *Selector) GetType() string
- func (m *Selector) GetValue() string
- func (*Selector) ProtoMessage()
- func (m *Selector) Reset()
- func (m *Selector) String() string
- func (m *Selector) XXX_DiscardUnknown()
- func (m *Selector) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Selector) XXX_Merge(src proto.Message)
- func (m *Selector) XXX_Size() int
- func (m *Selector) XXX_Unmarshal(b []byte) error
- type Selectors
- func (*Selectors) Descriptor() ([]byte, []int)
- func (m *Selectors) GetEntries() []*Selector
- func (*Selectors) ProtoMessage()
- func (m *Selectors) Reset()
- func (m *Selectors) String() string
- func (m *Selectors) XXX_DiscardUnknown()
- func (m *Selectors) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Selectors) XXX_Merge(src proto.Message)
- func (m *Selectors) XXX_Size() int
- func (m *Selectors) XXX_Unmarshal(b []byte) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AttestationData ¶
type AttestationData struct { //* Type of attestation to perform. Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"` //* The attestation data. Data []byte `protobuf:"bytes,2,opt,name=data,proto3" json:"data,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* A type which contains attestation data for specific platform.
func (*AttestationData) Descriptor ¶
func (*AttestationData) Descriptor() ([]byte, []int)
func (*AttestationData) GetData ¶
func (m *AttestationData) GetData() []byte
func (*AttestationData) GetType ¶
func (m *AttestationData) GetType() string
func (*AttestationData) ProtoMessage ¶
func (*AttestationData) ProtoMessage()
func (*AttestationData) Reset ¶
func (m *AttestationData) Reset()
func (*AttestationData) String ¶
func (m *AttestationData) String() string
func (*AttestationData) XXX_DiscardUnknown ¶
func (m *AttestationData) XXX_DiscardUnknown()
func (*AttestationData) XXX_Marshal ¶
func (m *AttestationData) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*AttestationData) XXX_Merge ¶
func (m *AttestationData) XXX_Merge(src proto.Message)
func (*AttestationData) XXX_Size ¶
func (m *AttestationData) XXX_Size() int
func (*AttestationData) XXX_Unmarshal ¶
func (m *AttestationData) XXX_Unmarshal(b []byte) error
type AttestedNode ¶
type AttestedNode struct { // Node SPIFFE ID SpiffeId string `protobuf:"bytes,1,opt,name=spiffe_id,json=spiffeId,proto3" json:"spiffe_id,omitempty"` // Attestation data type AttestationDataType string `protobuf:"bytes,2,opt,name=attestation_data_type,json=attestationDataType,proto3" json:"attestation_data_type,omitempty"` // Node certificate serial number CertSerialNumber string `protobuf:"bytes,3,opt,name=cert_serial_number,json=certSerialNumber,proto3" json:"cert_serial_number,omitempty"` // Node certificate not_after (seconds since unix epoch) CertNotAfter int64 `protobuf:"varint,4,opt,name=cert_not_after,json=certNotAfter,proto3" json:"cert_not_after,omitempty"` // Node certificate serial number NewCertSerialNumber string `protobuf:"bytes,5,opt,name=new_cert_serial_number,json=newCertSerialNumber,proto3" json:"new_cert_serial_number,omitempty"` // Node certificate not_after (seconds since unix epoch) NewCertNotAfter int64 `protobuf:"varint,6,opt,name=new_cert_not_after,json=newCertNotAfter,proto3" json:"new_cert_not_after,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
Represents an attested SPIRE agent
func (*AttestedNode) Descriptor ¶
func (*AttestedNode) Descriptor() ([]byte, []int)
func (*AttestedNode) GetAttestationDataType ¶
func (m *AttestedNode) GetAttestationDataType() string
func (*AttestedNode) GetCertNotAfter ¶
func (m *AttestedNode) GetCertNotAfter() int64
func (*AttestedNode) GetCertSerialNumber ¶
func (m *AttestedNode) GetCertSerialNumber() string
func (*AttestedNode) GetNewCertNotAfter ¶
func (m *AttestedNode) GetNewCertNotAfter() int64
func (*AttestedNode) GetNewCertSerialNumber ¶
func (m *AttestedNode) GetNewCertSerialNumber() string
func (*AttestedNode) GetSpiffeId ¶
func (m *AttestedNode) GetSpiffeId() string
func (*AttestedNode) ProtoMessage ¶
func (*AttestedNode) ProtoMessage()
func (*AttestedNode) Reset ¶
func (m *AttestedNode) Reset()
func (*AttestedNode) String ¶
func (m *AttestedNode) String() string
func (*AttestedNode) XXX_DiscardUnknown ¶
func (m *AttestedNode) XXX_DiscardUnknown()
func (*AttestedNode) XXX_Marshal ¶
func (m *AttestedNode) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*AttestedNode) XXX_Merge ¶
func (m *AttestedNode) XXX_Merge(src proto.Message)
func (*AttestedNode) XXX_Size ¶
func (m *AttestedNode) XXX_Size() int
func (*AttestedNode) XXX_Unmarshal ¶
func (m *AttestedNode) XXX_Unmarshal(b []byte) error
type Bundle ¶
type Bundle struct { //* the SPIFFE ID of the trust domain the bundle belongs to TrustDomainId string `protobuf:"bytes,1,opt,name=trust_domain_id,json=trustDomainId,proto3" json:"trust_domain_id,omitempty"` //* list of root CA certificates RootCas []*Certificate `protobuf:"bytes,2,rep,name=root_cas,json=rootCas,proto3" json:"root_cas,omitempty"` //* list of JWT signing keys JwtSigningKeys []*PublicKey `protobuf:"bytes,3,rep,name=jwt_signing_keys,json=jwtSigningKeys,proto3" json:"jwt_signing_keys,omitempty"` //* refresh hint is a hint, in seconds, on how often a bundle consumer // should poll for bundle updates RefreshHint int64 `protobuf:"varint,4,opt,name=refresh_hint,json=refreshHint,proto3" json:"refresh_hint,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
func (*Bundle) Descriptor ¶
func (*Bundle) GetJwtSigningKeys ¶
func (*Bundle) GetRefreshHint ¶
func (*Bundle) GetRootCas ¶
func (m *Bundle) GetRootCas() []*Certificate
func (*Bundle) GetTrustDomainId ¶
func (*Bundle) ProtoMessage ¶
func (*Bundle) ProtoMessage()
func (*Bundle) XXX_DiscardUnknown ¶
func (m *Bundle) XXX_DiscardUnknown()
func (*Bundle) XXX_Marshal ¶
func (*Bundle) XXX_Unmarshal ¶
type Certificate ¶
type Certificate struct { DerBytes []byte `protobuf:"bytes,1,opt,name=der_bytes,json=derBytes,proto3" json:"der_bytes,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* Certificate represents a ASN.1/DER encoded X509 certificate
func (*Certificate) Descriptor ¶
func (*Certificate) Descriptor() ([]byte, []int)
func (*Certificate) GetDerBytes ¶
func (m *Certificate) GetDerBytes() []byte
func (*Certificate) ProtoMessage ¶
func (*Certificate) ProtoMessage()
func (*Certificate) Reset ¶
func (m *Certificate) Reset()
func (*Certificate) String ¶
func (m *Certificate) String() string
func (*Certificate) XXX_DiscardUnknown ¶
func (m *Certificate) XXX_DiscardUnknown()
func (*Certificate) XXX_Marshal ¶
func (m *Certificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*Certificate) XXX_Merge ¶
func (m *Certificate) XXX_Merge(src proto.Message)
func (*Certificate) XXX_Size ¶
func (m *Certificate) XXX_Size() int
func (*Certificate) XXX_Unmarshal ¶
func (m *Certificate) XXX_Unmarshal(b []byte) error
type Empty ¶
type Empty struct { XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* Represents an empty message
func (*Empty) Descriptor ¶
func (*Empty) ProtoMessage ¶
func (*Empty) ProtoMessage()
func (*Empty) XXX_DiscardUnknown ¶
func (m *Empty) XXX_DiscardUnknown()
func (*Empty) XXX_Marshal ¶
func (*Empty) XXX_Unmarshal ¶
type PublicKey ¶
type PublicKey struct { //* PKIX encoded key data PkixBytes []byte `protobuf:"bytes,1,opt,name=pkix_bytes,json=pkixBytes,proto3" json:"pkix_bytes,omitempty"` //* key identifier Kid string `protobuf:"bytes,2,opt,name=kid,proto3" json:"kid,omitempty"` //* not after (seconds since unix epoch, 0 means "never expires") NotAfter int64 `protobuf:"varint,3,opt,name=not_after,json=notAfter,proto3" json:"not_after,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* PublicKey represents a PKIX encoded public key
func (*PublicKey) Descriptor ¶
func (*PublicKey) GetNotAfter ¶
func (*PublicKey) GetPkixBytes ¶
func (*PublicKey) ProtoMessage ¶
func (*PublicKey) ProtoMessage()
func (*PublicKey) XXX_DiscardUnknown ¶
func (m *PublicKey) XXX_DiscardUnknown()
func (*PublicKey) XXX_Marshal ¶
func (*PublicKey) XXX_Unmarshal ¶
type RegistrationEntries ¶
type RegistrationEntries struct { //* A list of RegistrationEntry. Entries []*RegistrationEntry `protobuf:"bytes,1,rep,name=entries,proto3" json:"entries,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* A list of registration entries.
func (*RegistrationEntries) Descriptor ¶
func (*RegistrationEntries) Descriptor() ([]byte, []int)
func (*RegistrationEntries) GetEntries ¶
func (m *RegistrationEntries) GetEntries() []*RegistrationEntry
func (*RegistrationEntries) ProtoMessage ¶
func (*RegistrationEntries) ProtoMessage()
func (*RegistrationEntries) Reset ¶
func (m *RegistrationEntries) Reset()
func (*RegistrationEntries) String ¶
func (m *RegistrationEntries) String() string
func (*RegistrationEntries) XXX_DiscardUnknown ¶
func (m *RegistrationEntries) XXX_DiscardUnknown()
func (*RegistrationEntries) XXX_Marshal ¶
func (m *RegistrationEntries) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*RegistrationEntries) XXX_Merge ¶
func (m *RegistrationEntries) XXX_Merge(src proto.Message)
func (*RegistrationEntries) XXX_Size ¶
func (m *RegistrationEntries) XXX_Size() int
func (*RegistrationEntries) XXX_Unmarshal ¶
func (m *RegistrationEntries) XXX_Unmarshal(b []byte) error
type RegistrationEntry ¶
type RegistrationEntry struct { //* A list of selectors. Selectors []*Selector `protobuf:"bytes,1,rep,name=selectors,proto3" json:"selectors,omitempty"` //* The SPIFFE ID of an entity that is authorized to attest the validity //of a selector ParentId string `protobuf:"bytes,2,opt,name=parent_id,json=parentId,proto3" json:"parent_id,omitempty"` //* The SPIFFE ID is a structured string used to identify a resource or //caller. It is defined as a URI comprising a “trust domain” and an //associated path. SpiffeId string `protobuf:"bytes,3,opt,name=spiffe_id,json=spiffeId,proto3" json:"spiffe_id,omitempty"` //* Time to live. Ttl int32 `protobuf:"varint,4,opt,name=ttl,proto3" json:"ttl,omitempty"` //* A list of federated trust domain SPIFFE IDs. FederatesWith []string `protobuf:"bytes,5,rep,name=federates_with,json=federatesWith,proto3" json:"federates_with,omitempty"` //* Entry ID EntryId string `protobuf:"bytes,6,opt,name=entry_id,json=entryId,proto3" json:"entry_id,omitempty"` //* Whether or not the workload is an admin workload. Admin workloads //can use their SVID's to authenticate with the Registration API, for //example. Admin bool `protobuf:"varint,7,opt,name=admin,proto3" json:"admin,omitempty"` //* To enable signing CA CSR in upstream spire server Downstream bool `protobuf:"varint,8,opt,name=downstream,proto3" json:"downstream,omitempty"` //* Expiration of this entry, in seconds from epoch EntryExpiry int64 `protobuf:"varint,9,opt,name=entryExpiry,proto3" json:"entryExpiry,omitempty"` //* DNS entries DnsNames []string `protobuf:"bytes,10,rep,name=dns_names,json=dnsNames,proto3" json:"dns_names,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* This is a curated record that the Server uses to set up and manage the various registered nodes and workloads that are controlled by it.
func (*RegistrationEntry) Descriptor ¶
func (*RegistrationEntry) Descriptor() ([]byte, []int)
func (*RegistrationEntry) GetAdmin ¶
func (m *RegistrationEntry) GetAdmin() bool
func (*RegistrationEntry) GetDnsNames ¶
func (m *RegistrationEntry) GetDnsNames() []string
func (*RegistrationEntry) GetDownstream ¶
func (m *RegistrationEntry) GetDownstream() bool
func (*RegistrationEntry) GetEntryExpiry ¶
func (m *RegistrationEntry) GetEntryExpiry() int64
func (*RegistrationEntry) GetEntryId ¶
func (m *RegistrationEntry) GetEntryId() string
func (*RegistrationEntry) GetFederatesWith ¶
func (m *RegistrationEntry) GetFederatesWith() []string
func (*RegistrationEntry) GetParentId ¶
func (m *RegistrationEntry) GetParentId() string
func (*RegistrationEntry) GetSelectors ¶
func (m *RegistrationEntry) GetSelectors() []*Selector
func (*RegistrationEntry) GetSpiffeId ¶
func (m *RegistrationEntry) GetSpiffeId() string
func (*RegistrationEntry) GetTtl ¶
func (m *RegistrationEntry) GetTtl() int32
func (*RegistrationEntry) ProtoMessage ¶
func (*RegistrationEntry) ProtoMessage()
func (*RegistrationEntry) Reset ¶
func (m *RegistrationEntry) Reset()
func (*RegistrationEntry) String ¶
func (m *RegistrationEntry) String() string
func (*RegistrationEntry) XXX_DiscardUnknown ¶
func (m *RegistrationEntry) XXX_DiscardUnknown()
func (*RegistrationEntry) XXX_Marshal ¶
func (m *RegistrationEntry) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*RegistrationEntry) XXX_Merge ¶
func (m *RegistrationEntry) XXX_Merge(src proto.Message)
func (*RegistrationEntry) XXX_Size ¶
func (m *RegistrationEntry) XXX_Size() int
func (*RegistrationEntry) XXX_Unmarshal ¶
func (m *RegistrationEntry) XXX_Unmarshal(b []byte) error
type Selector ¶
type Selector struct { //* A selector type represents the type of attestation used in attesting //the entity (Eg: AWS, K8). Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"` //* The value to be attested. Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* A type which describes the conditions under which a registration entry is matched.
func (*Selector) Descriptor ¶
func (*Selector) ProtoMessage ¶
func (*Selector) ProtoMessage()
func (*Selector) XXX_DiscardUnknown ¶
func (m *Selector) XXX_DiscardUnknown()
func (*Selector) XXX_Marshal ¶
func (*Selector) XXX_Unmarshal ¶
type Selectors ¶
type Selectors struct { //* A list of Selector. Entries []*Selector `protobuf:"bytes,1,rep,name=entries,proto3" json:"entries,omitempty"` XXX_NoUnkeyedLiteral struct{} `json:"-"` XXX_unrecognized []byte `json:"-"` XXX_sizecache int32 `json:"-"` }
* Represents a type with a list of Selector.
func (*Selectors) Descriptor ¶
func (*Selectors) GetEntries ¶
func (*Selectors) ProtoMessage ¶
func (*Selectors) ProtoMessage()
func (*Selectors) XXX_DiscardUnknown ¶
func (m *Selectors) XXX_DiscardUnknown()
func (*Selectors) XXX_Marshal ¶
func (*Selectors) XXX_Unmarshal ¶
Click to show internal directories.
Click to hide internal directories.