GO-2022-0995: Talos worker join token can be used to get elevated access level to the Talos API in github.com/talos-systems/talos

gen

package

v1.2.0-alpha.0 Latest Latest Go to latest Published: Jun 30, 2022 License: MPL-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type LocalGenerator struct {
	// contains filtered or unexported fields
}

LocalGenerator represents the OS identity generator.

func NewLocalGenerator(caKey, caCrt []byte) (g *LocalGenerator, err error)

NewLocalGenerator initializes a LocalGenerator.

func (g *LocalGenerator) Identity(csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

Identity creates an identity certificate using a local root CA.

type RemoteGenerator struct {
	// contains filtered or unexported fields
}

RemoteGenerator represents the OS identity generator.

func NewRemoteGenerator(token string, endpoints []string, ca *x509.PEMEncodedCertificateAndKey) (g *RemoteGenerator, err error)

NewRemoteGenerator initializes a RemoteGenerator with a preconfigured grpc.ClientConn.

func (g *RemoteGenerator) Close() error

Close closes the gRPC client connection.

func (g *RemoteGenerator) Identity(csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

Identity creates an identity certificate via the security API.

func (g *RemoteGenerator) IdentityContext(ctx context.Context, csr *x509.CertificateSigningRequest) (ca, crt []byte, err error)

IdentityContext creates an identity certificate via the security API.