awspca

Documentation

Index

• func BuiltIn() catalog.Plugin
• type PCAClient
• type PCAPlugin
  • func New() *PCAPlugin
  • func (m *PCAPlugin) Configure(ctx context.Context, req *spi.ConfigureRequest) (*spi.ConfigureResponse, error)
  • func (*PCAPlugin) GetPluginInfo(context.Context, *spi.GetPluginInfoRequest) (*spi.GetPluginInfoResponse, error)
  • func (m *PCAPlugin) MintX509CA(request *upstreamauthority.MintX509CARequest, ...) error
  • func (m *PCAPlugin) PublishJWTKey(*upstreamauthority.PublishJWTKeyRequest, ...) error
  • func (m *PCAPlugin) SetLogger(log hclog.Logger)
• type PCAPluginConfiguration

Functions

func BuiltIn

func BuiltIn() catalog.Plugin

Types

type PCAClient

type PCAClient interface {
	DescribeCertificateAuthorityWithContext(aws.Context, *acmpca.DescribeCertificateAuthorityInput, ...request.Option) (*acmpca.DescribeCertificateAuthorityOutput, error)
	IssueCertificateWithContext(aws.Context, *acmpca.IssueCertificateInput, ...request.Option) (*acmpca.IssueCertificateOutput, error)
	WaitUntilCertificateIssuedWithContext(aws.Context, *acmpca.GetCertificateInput, ...request.WaiterOption) error
	GetCertificateWithContext(aws.Context, *acmpca.GetCertificateInput, ...request.Option) (*acmpca.GetCertificateOutput, error)
}

PCAClient provides an interface which can be mocked to test the functionality of the plugin.

type PCAPlugin

type PCAPlugin struct {
	upstreamauthority.UnsafeUpstreamAuthorityServer
	// contains filtered or unexported fields
}

PCAPlugin is the main representation of this upstreamauthority plugin

func New

func New() *PCAPlugin

New returns an instantiated plugin

func (*PCAPlugin) Configure

func (m *PCAPlugin) Configure(ctx context.Context, req *spi.ConfigureRequest) (*spi.ConfigureResponse, error)

Configure sets up the plugin for use as an upstream authority

func (*PCAPlugin) GetPluginInfo

func (*PCAPlugin) GetPluginInfo(context.Context, *spi.GetPluginInfoRequest) (*spi.GetPluginInfoResponse, error)

GetPluginInfo returns information about this plugin to Spire server

func (*PCAPlugin) MintX509CA

func (m *PCAPlugin) MintX509CA(request *upstreamauthority.MintX509CARequest, stream upstreamauthority.UpstreamAuthority_MintX509CAServer) error

MintX509CA mints an X509CA by submitting the CSR to ACM to be signed by the certificate authority

func (*PCAPlugin) PublishJWTKey

func (m *PCAPlugin) PublishJWTKey(*upstreamauthority.PublishJWTKeyRequest, upstreamauthority.UpstreamAuthority_PublishJWTKeyServer) error

PublishJWTKey is not implemented by the wrapper and returns a codes.Unimplemented status

func (*PCAPlugin) SetLogger

func (m *PCAPlugin) SetLogger(log hclog.Logger)

type PCAPluginConfiguration

type PCAPluginConfiguration struct {
	Region                  string `hcl:"region" json:"region"`
	Endpoint                string `hcl:"endpoint" json:"endpoint"`
	CertificateAuthorityARN string `hcl:"certificate_authority_arn" json:"certificate_authority_arn"`
	SigningAlgorithm        string `hcl:"signing_algorithm" json:"signing_algorithm"`
	CASigningTemplateARN    string `hcl:"ca_signing_template_arn" json:"ca_signing_template_arn"`
	AssumeRoleARN           string `hcl:"assume_role_arn" json:"assume_role_arn"`
	SupplementalBundlePath  string `hcl:"supplemental_bundle_path" json:"supplemental_bundle_path"`
}

PCAPluginConfiguration provides configuration context for the plugin