Documentation
¶
Index ¶
Constants ¶
View Source
const ( DefaultKubernetesServiceAccountPath = "/var/run/secrets/kubernetes.io/serviceaccount/token" DefaultIsitoCaServiceAccountPath = "/var/run/secrets/tokens/istio-token" DefaultRootCertPath = "/var/run/secrets/istio/root-cert.pem" DefaultIstioCAEndpoint = "istiod.istio-system.svc:15012" DefaultCertSigner = "kubernetes.default.svc" DefaultClusterID = "Kubernetes" )
Variables ¶
View Source
var ( PodNamespace = f(os.Getenv("POD_NAMESPACE"), "default") CertTTL = f(os.Getenv("CERT_TTL"), "31536000") RootCertPath = f(os.Getenv("ROOT_CERT_PATH"), DefaultRootCertPath) IstioCAEndpoint = f(os.Getenv("ISTIO_CA_ENDPOINT"), DefaultIstioCAEndpoint) ServiceAccountPath = f(os.Getenv("SERVICE_ACCOUNT_PATH"), DefaultIsitoCaServiceAccountPath) URIPrefix = f(os.Getenv("URI_PREFIX"), "spiffe://") Domain = f(os.Getenv("DOMAIN"), "cluster.local") ServiceAccountName = f(os.Getenv("SERVICE_ACCOUNT_NAME"), "default") )
Functions ¶
func NewSaTokenProvider ¶
NewSaTokenProvider return a provider
Types ¶
type AgentCertManager ¶
type AgentCertManager struct {
// contains filtered or unexported fields
}
AgentCertManager work in istio agent mode
func (*AgentCertManager) GetCertificate ¶
func (c *AgentCertManager) GetCertificate() ([]tls.Certificate, error)
GetCertificate return certificate of application
func (*AgentCertManager) GetRootCertificate ¶
func (c *AgentCertManager) GetRootCertificate() (*x509.CertPool, error)
GetRootCertificate return certificate of ca
type CACertManager ¶
type CACertManager struct {
// Certs contains a slice of cert/key pairs used to prove local identity.
Certs []tls.Certificate
// Roots contains the set of trusted roots to validate the peer's identity.
Roots *x509.CertPool
NoAfter time.Time
RootNoAfter time.Time
// contains filtered or unexported fields
}
CACertManager work in no agent mode, fetch cert form CA
func (*CACertManager) GetCertificate ¶
func (c *CACertManager) GetCertificate() ([]tls.Certificate, error)
GetCertificate return certificate of application
func (*CACertManager) GetRootCertificate ¶
func (c *CACertManager) GetRootCertificate() (*x509.CertPool, error)
GetRootCertificate return certificate of ca
func (*CACertManager) UpdateCert ¶
func (c *CACertManager) UpdateCert() error
UpdateCert update cert
func (*CACertManager) UpdateRoot ¶
func (c *CACertManager) UpdateRoot() error
UpdateRoot update root cert
type CertManager ¶
type CertManager interface {
GetCertificate() ([]tls.Certificate, error)
GetRootCertificate() (*x509.CertPool, error)
}
CertManager manage agent or no agent cert
Source Files
Directories
Click to show internal directories.
Click to hide internal directories.