gcpiit

Documentation

Index

• func BuiltIn() catalog.BuiltIn
• type IITAttestorConfig
• type IITAttestorPlugin
  • func New() *IITAttestorPlugin
  • func (p *IITAttestorPlugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error
  • func (p *IITAttestorPlugin) Configure(_ context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)
  • func (p *IITAttestorPlugin) SetLogger(log hclog.Logger)
  • func (p *IITAttestorPlugin) Validate(_ context.Context, req *configv1.ValidateRequest) (*configv1.ValidateResponse, error)

Functions

func BuiltIn

func BuiltIn() catalog.BuiltIn

Types

type IITAttestorConfig

type IITAttestorConfig struct {
	ProjectIDAllowList   []string `hcl:"projectid_allow_list"`
	AgentPathTemplate    string   `hcl:"agent_path_template"`
	UseInstanceMetadata  bool     `hcl:"use_instance_metadata"`
	AllowedLabelKeys     []string `hcl:"allowed_label_keys"`
	AllowedMetadataKeys  []string `hcl:"allowed_metadata_keys"`
	MaxMetadataValueSize int      `hcl:"max_metadata_value_size"`
	ServiceAccountFile   string   `hcl:"service_account_file"`
	// contains filtered or unexported fields
}

IITAttestorConfig is the config for IITAttestorPlugin.

type IITAttestorPlugin

type IITAttestorPlugin struct {
	nodeattestorbase.Base
	nodeattestorv1.UnsafeNodeAttestorServer
	configv1.UnsafeConfigServer
	// contains filtered or unexported fields
}

IITAttestorPlugin implements node attestation for agents running in GCP.

func New

func New() *IITAttestorPlugin

New creates a new IITAttestorPlugin.

func (*IITAttestorPlugin) Attest

func (p *IITAttestorPlugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error

Attest implements the server side logic for the gcp iit node attestation plugin.

func (*IITAttestorPlugin) Configure

func (p *IITAttestorPlugin) Configure(_ context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)

Configure configures the IITAttestorPlugin.

func (*IITAttestorPlugin) SetLogger

func (p *IITAttestorPlugin) SetLogger(log hclog.Logger)

SetLogger sets up plugin logging

func (*IITAttestorPlugin) Validate

func (p *IITAttestorPlugin) Validate(_ context.Context, req *configv1.ValidateRequest) (*configv1.ValidateResponse, error)