security

Documentation

Index

• Constants
• func NewSecurityOptions() *security.Options
• type CaClient
• type SecretManager
  • func NewSecretManager() (*SecretManager, error)
  • func (s *SecretManager) Run(stop <-chan struct{})
  • func (s *SecretManager) SendCertRequest(identity string, op int)
  • func (s *SecretManager) StoreCert(identity string, newCert *istiosecurity.SecretItem)

Constants

const (
	ADD = iota
	DELETE
	RETRY
	Rotate
)

Functions

func NewSecurityOptions

func NewSecurityOptions() *security.Options

Types

type CaClient

type CaClient interface {
	CsrSend(csrPEM []byte, certValidsec int64, identity string) ([]string, error)
	FetchCert(identity string) (*istiosecurity.SecretItem, error)
	Close() error
}

type SecretManager

type SecretManager struct {
	// contains filtered or unexported fields
}

func NewSecretManager

func NewSecretManager() (*SecretManager, error)

NewSecretManager creates a new secretManager

func (*SecretManager) Run

func (s *SecretManager) Run(stop <-chan struct{})

func (*SecretManager) SendCertRequest

func (s *SecretManager) SendCertRequest(identity string, op int)

func (*SecretManager) StoreCert

func (s *SecretManager) StoreCert(identity string, newCert *istiosecurity.SecretItem)