workload

package

v1.9.4 Latest Latest Go to latest Published: Apr 5, 2024 License: Apache-2.0 Imports: 26 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/spiffe/spire

Links

Open Source Insights

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Attestor ¶ added in v0.12.0

type Attestor interface {
	Attest(ctx context.Context) ([]*common.Selector, error)
}

type Config ¶ added in v0.12.0

type Config struct {
	Manager                       Manager
	Attestor                      Attestor
	AllowUnauthenticatedVerifiers bool
	AllowedForeignJWTClaims       map[string]struct{}
	TrustDomain                   spiffeid.TrustDomain
}

type Handler ¶

type Handler struct {
	workload.UnsafeSpiffeWorkloadAPIServer
	// contains filtered or unexported fields
}

Handler implements the Workload API interface

func New ¶ added in v0.12.0

func New(c Config) *Handler

func (*Handler) FetchJWTBundles ¶

func (h *Handler) FetchJWTBundles(_ *workload.JWTBundlesRequest, stream workload.SpiffeWorkloadAPI_FetchJWTBundlesServer) error

FetchJWTBundles processes request for JWT bundles

func (*Handler) FetchJWTSVID ¶

func (h *Handler) FetchJWTSVID(ctx context.Context, req *workload.JWTSVIDRequest) (resp *workload.JWTSVIDResponse, err error)

FetchJWTSVID processes request for a JWT-SVID. In case of multiple fetched SVIDs with same hint, the SVID that has the oldest associated entry will be returned.

func (*Handler) FetchX509Bundles ¶ added in v1.0.0

func (h *Handler) FetchX509Bundles(_ *workload.X509BundlesRequest, stream workload.SpiffeWorkloadAPI_FetchX509BundlesServer) error

FetchX509Bundles processes request for x509 bundles

func (*Handler) FetchX509SVID ¶

func (h *Handler) FetchX509SVID(_ *workload.X509SVIDRequest, stream workload.SpiffeWorkloadAPI_FetchX509SVIDServer) error

FetchX509SVID processes request for a x509 SVID. In case of multiple fetched SVIDs with same hint, the SVID that has the oldest associated entry will be returned.

func (*Handler) ValidateJWTSVID ¶

func (h *Handler) ValidateJWTSVID(ctx context.Context, req *workload.ValidateJWTSVIDRequest) (*workload.ValidateJWTSVIDResponse, error)

ValidateJWTSVID processes request for JWT-SVID validation

type Manager ¶ added in v0.12.0

type Manager interface {
	SubscribeToCacheChanges(ctx context.Context, key cache.Selectors) (cache.Subscriber, error)
	MatchingRegistrationEntries(selectors []*common.Selector) []*common.RegistrationEntry
	FetchJWTSVID(ctx context.Context, entry *common.RegistrationEntry, audience []string) (*client.JWTSVID, error)
	FetchWorkloadUpdate([]*common.Selector) *cache.WorkloadUpdate
}

Source Files ¶

View all Source files

handler.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL