trustbundle

Documentation

Index

• type Source
  • func (s Source) String() string
• type TrustAnchorConfig
• type TrustAnchorUpdate
• type TrustBundle
  • func NewTrustBundle(remoteCaCertPool *x509.CertPool, meshConfig mesh.Watcher) *TrustBundle
  • func (tb *TrustBundle) AddMeshConfigUpdate(cfg *meshconfig.MeshConfig) error
  • func (tb *TrustBundle) GetTrustBundle() []string
  • func (tb *TrustBundle) ProcessRemoteTrustAnchors(stop <-chan struct{}, pollInterval time.Duration)
  • func (tb *TrustBundle) UpdateCb(updatecb func())
  • func (tb *TrustBundle) UpdateTrustAnchor(anchorConfig *TrustAnchorUpdate) error

Types

type Source

type Source int

Source is all possible sources of MeshConfig

const (
	SourceIstioCA Source = iota
	SourceMeshConfig
	SourceIstioRA

	RemoteDefaultPollPeriod = 30 * time.Minute
)

func (Source) String

func (s Source) String() string

type TrustAnchorConfig

type TrustAnchorConfig struct {
	Certs []string
}

type TrustAnchorUpdate

type TrustAnchorUpdate struct {
	TrustAnchorConfig
	Source Source
}

type TrustBundle

type TrustBundle struct {
	// contains filtered or unexported fields
}

func NewTrustBundle

func NewTrustBundle(remoteCaCertPool *x509.CertPool, meshConfig mesh.Watcher) *TrustBundle

NewTrustBundle returns a new trustbundle

func (*TrustBundle) AddMeshConfigUpdate

func (tb *TrustBundle) AddMeshConfigUpdate(cfg *meshconfig.MeshConfig) error

AddMeshConfigUpdate : Update trustAnchor configurations from meshConfig

func (*TrustBundle) GetTrustBundle

func (tb *TrustBundle) GetTrustBundle() []string

GetTrustBundle : Retrieves all the trustAnchors for current Spiffee Trust Domain

func (*TrustBundle) ProcessRemoteTrustAnchors

func (tb *TrustBundle) ProcessRemoteTrustAnchors(stop <-chan struct{}, pollInterval time.Duration)

func (*TrustBundle) UpdateCb

func (tb *TrustBundle) UpdateCb(updatecb func())

func (*TrustBundle) UpdateTrustAnchor

func (tb *TrustBundle) UpdateTrustAnchor(anchorConfig *TrustAnchorUpdate) error

UpdateTrustAnchor : External Function to merge a TrustAnchor config with the existing TrustBundle