Directories ¶
Path | Synopsis |
---|---|
Package certauthority implements a simple x509 certificate authority suitable for use in an aggregated API service.
|
Package certauthority implements a simple x509 certificate authority suitable for use in an aggregated API service. |
dynamiccertauthority
Package dynamiccertauthority implements a x509 certificate authority capable of issuing certificates from a dynamically updating CA keypair.
|
Package dynamiccertauthority implements a x509 certificate authority capable of issuing certificates from a dynamically updating CA keypair. |
Package client is a wrapper for interacting with Pinniped's CredentialRequest API.
|
Package client is a wrapper for interacting with Pinniped's CredentialRequest API. |
concierge
|
|
server
Package server is the command line entry point for pinniped-concierge.
|
Package server is the command line entry point for pinniped-concierge. |
config
|
|
concierge
Package concierge contains functionality to load/store Config's from/to some source.
|
Package concierge contains functionality to load/store Config's from/to some source. |
supervisor
Package supervisor contains functionality to load/store Config's from/to some source.
|
Package supervisor contains functionality to load/store Config's from/to some source. |
apicerts
Package apicerts contains controllers that work together to provide rotating API certs.
|
Package apicerts contains controllers that work together to provide rotating API certs. |
authenticator
Package authenticator contains helper code for dealing with *Authenticator CRDs.
|
Package authenticator contains helper code for dealing with *Authenticator CRDs. |
authenticator/authncache
Package authncache implements a cache of active authenticators.
|
Package authncache implements a cache of active authenticators. |
authenticator/cachecleaner
Package cachecleaner implements a controller for garbage collecting authenticators from an authenticator cache.
|
Package cachecleaner implements a controller for garbage collecting authenticators from an authenticator cache. |
authenticator/jwtcachefiller
Package jwtcachefiller implements a controller for filling an authncache.Cache with each added/updated JWTAuthenticator.
|
Package jwtcachefiller implements a controller for filling an authncache.Cache with each added/updated JWTAuthenticator. |
authenticator/webhookcachefiller
Package webhookcachefiller implements a controller for filling an authncache.Cache with each added/updated WebhookAuthenticator.
|
Package webhookcachefiller implements a controller for filling an authncache.Cache with each added/updated WebhookAuthenticator. |
issuerconfig
Package issuerconfig contains controller(s) for reconciling CredentialIssuer's.
|
Package issuerconfig contains controller(s) for reconciling CredentialIssuer's. |
kubecertagent
Package kubecertagent provides controllers that ensure a set of pods (the kube-cert-agent), is colocated with the Kubernetes controller manager so that Pinniped can access its signing keys.
|
Package kubecertagent provides controllers that ensure a set of pods (the kube-cert-agent), is colocated with the Kubernetes controller manager so that Pinniped can access its signing keys. |
supervisorconfig/generator
Package secretgenerator provides a supervisorSecretsController that can ensure existence of a generated secret.
|
Package secretgenerator provides a supervisorSecretsController that can ensure existence of a generated secret. |
supervisorconfig/upstreamwatcher
Package upstreamwatcher implements a controller that watches OIDCIdentityProvider objects.
|
Package upstreamwatcher implements a controller that watches OIDCIdentityProvider objects. |
Package controllermanager provides an entrypoint into running all of the controllers that run as a part of Pinniped.
|
Package controllermanager provides an entrypoint into running all of the controllers that run as a part of Pinniped. |
Package downward implements a client interface for interacting with Kubernetes "downwardAPI" volumes.
|
Package downward implements a client interface for interacting with Kubernetes "downwardAPI" volumes. |
Package dynamiccert provides a simple way of communicating a dynamically updating PEM-encoded certificate and key.
|
Package dynamiccert provides a simple way of communicating a dynamically updating PEM-encoded certificate and key. |
httputil
|
|
httperr
Package httperr contains some helpers for nicer error handling in http.Handler implementations.
|
Package httperr contains some helpers for nicer error handling in http.Handler implementations. |
securityheader
Package securityheader implements an HTTP middleware for setting security-related response headers.
|
Package securityheader implements an HTTP middleware for setting security-related response headers. |
mocks
|
|
credentialrequestmocks
Package credentialrequestmocks is a generated GoMock package.
|
Package credentialrequestmocks is a generated GoMock package. |
mockkeyset
Package mockkeyset is a generated GoMock package.
|
Package mockkeyset is a generated GoMock package. |
mocksecrethelper
Package mocksecrethelper is a generated GoMock package.
|
Package mocksecrethelper is a generated GoMock package. |
mocktokenauthenticator
Package mocktokenauthenticator is a generated GoMock package.
|
Package mocktokenauthenticator is a generated GoMock package. |
mocktokenauthenticatorcloser
Package mocktokenauthenticatorcloser is a generated GoMock package.
|
Package mocktokenauthenticatorcloser is a generated GoMock package. |
mockupstreamoidcidentityprovider
Package mockupstreamoidcidentityprovider is a generated GoMock package.
|
Package mockupstreamoidcidentityprovider is a generated GoMock package. |
Package multierror provides a type that can translate multiple errors into a Go error interface.
|
Package multierror provides a type that can translate multiple errors into a Go error interface. |
Package oidc contains common OIDC functionality needed by Pinniped.
|
Package oidc contains common OIDC functionality needed by Pinniped. |
auth
Package auth provides a handler for the OIDC authorization endpoint.
|
Package auth provides a handler for the OIDC authorization endpoint. |
callback
Package callback provides a handler for the OIDC callback endpoint.
|
Package callback provides a handler for the OIDC callback endpoint. |
discovery
Package discovery provides a handler for the OIDC discovery endpoint.
|
Package discovery provides a handler for the OIDC discovery endpoint. |
dynamiccodec
Package dynamiccodec provides a type that can encode information using a just-in-time signing and (optionally) encryption secret.
|
Package dynamiccodec provides a type that can encode information using a just-in-time signing and (optionally) encryption secret. |
jwks
Package discovery provides a handler for the OIDC discovery endpoint.
|
Package discovery provides a handler for the OIDC discovery endpoint. |
token
Package token provides a handler for the OIDC token endpoint.
|
Package token provides a handler for the OIDC token endpoint. |
Package plog implements a thin layer over klog to help enforce pinniped's logging convention.
|
Package plog implements a thin layer over klog to help enforce pinniped's logging convention. |
registry
|
|
credentialrequest
Package credentialrequest provides REST functionality for the CredentialRequest resource.
|
Package credentialrequest provides REST functionality for the CredentialRequest resource. |
testlogger
Package testlogger implements a logr.Logger suitable for writing test assertions.
|
Package testlogger implements a logr.Logger suitable for writing test assertions. |
Package upstreamoidc implements an abstraction of upstream OIDC provider interactions.
|
Package upstreamoidc implements an abstraction of upstream OIDC provider interactions. |
Click to show internal directories.
Click to hide internal directories.