workload

Documentation

Index

• type Attestor
• type Config
• type Handler
  • func New(c Config) *Handler
  • func (h *Handler) FetchJWTBundles(_ *workload.JWTBundlesRequest, ...) error
  • func (h *Handler) FetchJWTSVID(ctx context.Context, req *workload.JWTSVIDRequest) (resp *workload.JWTSVIDResponse, err error)
  • func (h *Handler) FetchX509Bundles(_ *workload.X509BundlesRequest, ...) error
  • func (h *Handler) FetchX509SVID(_ *workload.X509SVIDRequest, ...) error
  • func (h *Handler) ValidateJWTSVID(ctx context.Context, req *workload.ValidateJWTSVIDRequest) (*workload.ValidateJWTSVIDResponse, error)
• type Manager

Types

type Attestor

type Attestor interface {
	Attest(ctx context.Context) ([]*common.Selector, error)
}

type Config

type Config struct {
	Manager                       Manager
	Attestor                      Attestor
	AllowUnauthenticatedVerifiers bool
	AllowedForeignJWTClaims       map[string]struct{}
	TrustDomain                   spiffeid.TrustDomain
}

type Handler

type Handler struct {
	workload.UnsafeSpiffeWorkloadAPIServer
	// contains filtered or unexported fields
}

Handler implements the Workload API interface

func New

func New(c Config) *Handler

func (*Handler) FetchJWTBundles

func (h *Handler) FetchJWTBundles(_ *workload.JWTBundlesRequest, stream workload.SpiffeWorkloadAPI_FetchJWTBundlesServer) error

FetchJWTBundles processes request for JWT bundles

func (*Handler) FetchJWTSVID

func (h *Handler) FetchJWTSVID(ctx context.Context, req *workload.JWTSVIDRequest) (resp *workload.JWTSVIDResponse, err error)

FetchJWTSVID processes request for a JWT-SVID. In case of multiple fetched SVIDs with same hint, the SVID that has the oldest associated entry will be returned.

func (*Handler) FetchX509Bundles

func (h *Handler) FetchX509Bundles(_ *workload.X509BundlesRequest, stream workload.SpiffeWorkloadAPI_FetchX509BundlesServer) error

FetchX509Bundles processes request for x509 bundles

func (*Handler) FetchX509SVID

func (h *Handler) FetchX509SVID(_ *workload.X509SVIDRequest, stream workload.SpiffeWorkloadAPI_FetchX509SVIDServer) error

FetchX509SVID processes request for a x509 SVID. In case of multiple fetched SVIDs with same hint, the SVID that has the oldest associated entry will be returned.

func (*Handler) ValidateJWTSVID

func (h *Handler) ValidateJWTSVID(ctx context.Context, req *workload.ValidateJWTSVIDRequest) (*workload.ValidateJWTSVIDResponse, error)

ValidateJWTSVID processes request for JWT-SVID validation

type Manager

type Manager interface {
	SubscribeToCacheChanges(ctx context.Context, key cache.Selectors) (cache.Subscriber, error)
	MatchingRegistrationEntries(selectors []*common.Selector) []*common.RegistrationEntry
	FetchJWTSVID(ctx context.Context, entry *common.RegistrationEntry, audience []string) (*client.JWTSVID, error)
	FetchWorkloadUpdate([]*common.Selector) *cache.WorkloadUpdate
}