Compare commits
5 Commits
| Author | SHA1 | Date |
|---|---|---|
Volkan Özçelik
|
e7312f630a | |
|
Volkan Özçelik
|
3ec883d85a | |
|
Volkan Özçelik
|
6f50ebcc3b | |
|
Volkan Özçelik
|
7943a77e76 | |
|
Volkan Özçelik
|
fa7c888c1e |
23
go.mod
23
go.mod
|
|
@ -1,27 +1,28 @@
|
|||
module github.com/spiffe/spike-sdk-go
|
||||
|
||||
go 1.23.3
|
||||
go 1.24
|
||||
|
||||
toolchain go1.24.1
|
||||
|
||||
require (
|
||||
github.com/cenkalti/backoff/v4 v4.3.0
|
||||
github.com/google/uuid v1.6.0
|
||||
github.com/spiffe/go-spiffe/v2 v2.4.0
|
||||
github.com/spiffe/go-spiffe/v2 v2.5.0
|
||||
github.com/stretchr/testify v1.10.0
|
||||
)
|
||||
|
||||
require (
|
||||
github.com/Microsoft/go-winio v0.6.2 // indirect
|
||||
github.com/davecgh/go-spew v1.1.1 // indirect
|
||||
github.com/go-jose/go-jose/v4 v4.0.5 // indirect
|
||||
github.com/go-jose/go-jose/v4 v4.1.0 // indirect
|
||||
github.com/kr/text v0.2.0 // indirect
|
||||
github.com/pmezard/go-difflib v1.0.0 // indirect
|
||||
github.com/zeebo/errs v1.3.0 // indirect
|
||||
golang.org/x/crypto v0.32.0 // indirect
|
||||
golang.org/x/net v0.33.0 // indirect
|
||||
golang.org/x/sys v0.29.0 // indirect
|
||||
golang.org/x/text v0.21.0 // indirect
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142 // indirect
|
||||
google.golang.org/grpc v1.67.1 // indirect
|
||||
google.golang.org/protobuf v1.34.2 // indirect
|
||||
github.com/zeebo/errs v1.4.0 // indirect
|
||||
golang.org/x/net v0.39.0 // indirect
|
||||
golang.org/x/sys v0.32.0 // indirect
|
||||
golang.org/x/text v0.24.0 // indirect
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20250428153025-10db94c68c34 // indirect
|
||||
google.golang.org/grpc v1.72.0 // indirect
|
||||
google.golang.org/protobuf v1.36.6 // indirect
|
||||
gopkg.in/yaml.v3 v3.0.1 // indirect
|
||||
)
|
||||
|
|
|
|||
127
go.sum
127
go.sum
|
|
@ -1,42 +1,169 @@
|
|||
cel.dev/expr v0.16.0 h1:yloc84fytn4zmJX2GU3TkXGsaieaV7dQ057Qs4sIG2Y=
|
||||
cel.dev/expr v0.16.0/go.mod h1:TRSuuV7DlVCE/uwv5QbAiW/v8l5O8C4eEPHeu7gf7Sg=
|
||||
cel.dev/expr v0.19.0 h1:lXuo+nDhpyJSpWxpPVi5cPUwzKb+dsdOiw6IreM5yt0=
|
||||
cel.dev/expr v0.19.0/go.mod h1:MrpN08Q+lEBs+bGYdLxxHkZoUSsCp0nSKTs0nTymJgw=
|
||||
cel.dev/expr v0.20.0 h1:OunBvVCfvpWlt4dN7zg3FM6TDkzOePe1+foGJ9AXeeI=
|
||||
cloud.google.com/go/compute/metadata v0.5.0 h1:Zr0eK8JbFv6+Wi4ilXAR8FJ3wyNdpxHKJNPos6LTZOY=
|
||||
cloud.google.com/go/compute/metadata v0.5.0/go.mod h1:aHnloV2TPI38yx4s9+wAZhHykWvVCfu7hQbF+9CWoiY=
|
||||
cloud.google.com/go/compute/metadata v0.5.2 h1:UxK4uu/Tn+I3p2dYWTfiX4wva7aYlKixAHn3fyqngqo=
|
||||
cloud.google.com/go/compute/metadata v0.5.2/go.mod h1:C66sj2AluDcIqakBq/M8lw8/ybHgOZqin2obFxa/E5k=
|
||||
cloud.google.com/go/compute/metadata v0.6.0 h1:A6hENjEsCDtC1k8byVsgwvVcioamEHvZ4j01OwKxG9I=
|
||||
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0 h1:3c8yed4lgqTt+oTQ+JNMDo+F4xprBf+O/il4ZC0nRLw=
|
||||
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.25.0/go.mod h1:obipzmGjfSjam60XLwGfqUkJsfiheAl+TUjG+4yzyPM=
|
||||
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.26.0 h1:f2Qw/Ehhimh5uO1fayV0QIW7DShEQqhtUfhYc+cBPlw=
|
||||
github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
|
||||
github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
|
||||
github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8=
|
||||
github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
|
||||
github.com/census-instrumentation/opencensus-proto v0.4.1 h1:iKLQ0xPNFxR/2hzXZMrBo8f1j86j5WHzznCCQxV/b8g=
|
||||
github.com/census-instrumentation/opencensus-proto v0.4.1/go.mod h1:4T9NM4+4Vw91VeyqjLS6ao50K5bOcLKN6Q42XnYaRYw=
|
||||
github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
|
||||
github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
|
||||
github.com/cncf/xds/go v0.0.0-20240723142845-024c85f92f20 h1:N+3sFI5GUjRKBi+i0TxYVST9h4Ie192jJWpHvthBBgg=
|
||||
github.com/cncf/xds/go v0.0.0-20240723142845-024c85f92f20/go.mod h1:W+zGtBO5Y1IgJhy4+A9GOqVhqLpfZi+vwmdNXUehLA8=
|
||||
github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78 h1:QVw89YDxXxEe+l8gU8ETbOasdwEV+avkR75ZzsVV9WI=
|
||||
github.com/cncf/xds/go v0.0.0-20240905190251-b4127c9b8d78/go.mod h1:W+zGtBO5Y1IgJhy4+A9GOqVhqLpfZi+vwmdNXUehLA8=
|
||||
github.com/cncf/xds/go v0.0.0-20250121191232-2f005788dc42 h1:Om6kYQYDUk5wWbT0t0q6pvyM49i9XZAv9dDrkDA7gjk=
|
||||
github.com/creack/pty v1.1.9 h1:uDmaGzcdjhF4i/plgjmEsriH11Y0o7RKapEf/LDaM3w=
|
||||
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
|
||||
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
|
||||
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
|
||||
github.com/envoyproxy/go-control-plane v0.13.0 h1:HzkeUz1Knt+3bK+8LG1bxOO/jzWZmdxpwC51i202les=
|
||||
github.com/envoyproxy/go-control-plane v0.13.0/go.mod h1:GRaKG3dwvFoTg4nj7aXdZnvMg4d7nvT/wl9WgVXn3Q8=
|
||||
github.com/envoyproxy/go-control-plane v0.13.1 h1:vPfJZCkob6yTMEgS+0TwfTUfbHjfy/6vOJ8hUWX/uXE=
|
||||
github.com/envoyproxy/go-control-plane v0.13.1/go.mod h1:X45hY0mufo6Fd0KW3rqsGvQMw58jvjymeCzBU3mWyHw=
|
||||
github.com/envoyproxy/go-control-plane v0.13.4 h1:zEqyPVyku6IvWCFwux4x9RxkLOMUL+1vC9xUFv5l2/M=
|
||||
github.com/envoyproxy/protoc-gen-validate v1.1.0 h1:tntQDh69XqOCOZsDz0lVJQez/2L6Uu2PdjCQwWCJ3bM=
|
||||
github.com/envoyproxy/protoc-gen-validate v1.1.0/go.mod h1:sXRDRVmzEbkM7CVcM06s9shE/m23dg3wzjl0UWqJ2q4=
|
||||
github.com/envoyproxy/protoc-gen-validate v1.2.1 h1:DEo3O99U8j4hBFwbJfrz9VtgcDfUKS7KJ7spH3d86P8=
|
||||
github.com/go-jose/go-jose/v4 v4.0.5 h1:M6T8+mKZl/+fNNuFHvGIzDz7BTLQPIounk/b9dw3AaE=
|
||||
github.com/go-jose/go-jose/v4 v4.0.5/go.mod h1:s3P1lRrkT8igV8D9OjyL4WRyHvjB6a4JSllnOrmmBOA=
|
||||
github.com/go-jose/go-jose/v4 v4.1.0 h1:cYSYxd3pw5zd2FSXk2vGdn9igQU2PS8MuxrCOCl0FdY=
|
||||
github.com/go-jose/go-jose/v4 v4.1.0/go.mod h1:GG/vqmYm3Von2nYiB2vGTXzdoNKE5tix5tuc6iAd+sw=
|
||||
github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
|
||||
github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
|
||||
github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
|
||||
github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
|
||||
github.com/golang/glog v1.2.2 h1:1+mZ9upx1Dh6FmUTFR1naJ77miKiXgALjWOZ3NVFPmY=
|
||||
github.com/golang/glog v1.2.2/go.mod h1:6AhwSGph0fcJtXVM/PEHPqZlFeoLxhs7/t5UDAwmO+w=
|
||||
github.com/golang/glog v1.2.3 h1:oDTdz9f5VGVVNGu/Q7UXKWYsD0873HXLHdJUNBsSEKM=
|
||||
github.com/golang/glog v1.2.3/go.mod h1:6AhwSGph0fcJtXVM/PEHPqZlFeoLxhs7/t5UDAwmO+w=
|
||||
github.com/golang/glog v1.2.4 h1:CNNw5U8lSiiBk7druxtSHHTsRWcxKoac6kZKm2peBBc=
|
||||
github.com/golang/protobuf v1.5.0 h1:LUVKkCeviFUMKqHa4tXIIij/lbhnMbP7Fn5wKdKkRh4=
|
||||
github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
|
||||
github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
|
||||
github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
|
||||
github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
|
||||
github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
|
||||
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
|
||||
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
|
||||
github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
|
||||
github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
|
||||
github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI=
|
||||
github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
|
||||
github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
|
||||
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
|
||||
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 h1:GFCKgmp0tecUJ0sJuv4pzYCqS9+RGSn52M3FUwPs+uo=
|
||||
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10/go.mod h1:t/avpk3KcrXxUnYOhZhMXJlSEyie6gQbtLq5NM3loB8=
|
||||
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
|
||||
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
|
||||
github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
|
||||
github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
|
||||
github.com/spiffe/go-spiffe/v2 v2.4.0 h1:j/FynG7hi2azrBG5cvjRcnQ4sux/VNj8FAVc99Fl66c=
|
||||
github.com/spiffe/go-spiffe/v2 v2.4.0/go.mod h1:m5qJ1hGzjxjtrkGHZupoXHo/FDWwCB1MdSyBzfHugx0=
|
||||
github.com/spiffe/go-spiffe/v2 v2.5.0 h1:N2I01KCUkv1FAjZXJMwh95KK1ZIQLYbPfhaxw8WS0hE=
|
||||
github.com/spiffe/go-spiffe/v2 v2.5.0/go.mod h1:P+NxobPc6wXhVtINNtFjNWGBTreew1GBUCwT2wPmb7g=
|
||||
github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY=
|
||||
github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
|
||||
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
|
||||
github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
|
||||
github.com/zeebo/errs v1.3.0 h1:hmiaKqgYZzcVgRL1Vkc1Mn2914BbzB0IBxs+ebeutGs=
|
||||
github.com/zeebo/errs v1.3.0/go.mod h1:sgbWHsvVuTPHcqJJGQ1WhI5KbWlHYz+2+2C/LSEtCw4=
|
||||
github.com/zeebo/errs v1.4.0 h1:XNdoD/RRMKP7HD0UhJnIzUy74ISdGGxURlYG8HSWSfM=
|
||||
github.com/zeebo/errs v1.4.0/go.mod h1:sgbWHsvVuTPHcqJJGQ1WhI5KbWlHYz+2+2C/LSEtCw4=
|
||||
go.opentelemetry.io/contrib/detectors/gcp v1.32.0 h1:P78qWqkLSShicHmAzfECaTgvslqHxblNE9j62Ws1NK8=
|
||||
go.opentelemetry.io/contrib/detectors/gcp v1.32.0/go.mod h1:TVqo0Sda4Cv8gCIixd7LuLwW4EylumVWfhjZJjDD4DU=
|
||||
go.opentelemetry.io/contrib/detectors/gcp v1.34.0 h1:JRxssobiPg23otYU5SbWtQC//snGVIM3Tx6QRzlQBao=
|
||||
go.opentelemetry.io/otel v1.32.0 h1:WnBN+Xjcteh0zdk01SVqV55d/m62NJLJdIyb4y/WO5U=
|
||||
go.opentelemetry.io/otel v1.32.0/go.mod h1:00DCVSB0RQcnzlwyTfqtxSm+DRr9hpYrHjNGiBHVQIg=
|
||||
go.opentelemetry.io/otel v1.34.0 h1:zRLXxLCgL1WyKsPVrgbSdMN4c0FMkDAskSTQP+0hdUY=
|
||||
go.opentelemetry.io/otel/metric v1.32.0 h1:xV2umtmNcThh2/a/aCP+h64Xx5wsj8qqnkYZktzNa0M=
|
||||
go.opentelemetry.io/otel/metric v1.32.0/go.mod h1:jH7CIbbK6SH2V2wE16W05BHCtIDzauciCRLoc/SyMv8=
|
||||
go.opentelemetry.io/otel/metric v1.34.0 h1:+eTR3U0MyfWjRDhmFMxe2SsW64QrZ84AOhvqS7Y+PoQ=
|
||||
go.opentelemetry.io/otel/sdk v1.32.0 h1:RNxepc9vK59A8XsgZQouW8ue8Gkb4jpWtJm9ge5lEG4=
|
||||
go.opentelemetry.io/otel/sdk v1.32.0/go.mod h1:LqgegDBjKMmb2GC6/PrTnteJG39I8/vJCAP9LlJXEjU=
|
||||
go.opentelemetry.io/otel/sdk v1.34.0 h1:95zS4k/2GOy069d321O8jWgYsW3MzVV+KuSPKp7Wr1A=
|
||||
go.opentelemetry.io/otel/sdk/metric v1.32.0 h1:rZvFnvmvawYb0alrYkjraqJq0Z4ZUJAiyYCU9snn1CU=
|
||||
go.opentelemetry.io/otel/sdk/metric v1.32.0/go.mod h1:PWeZlq0zt9YkYAp3gjKZ0eicRYvOh1Gd+X99x6GHpCQ=
|
||||
go.opentelemetry.io/otel/sdk/metric v1.34.0 h1:5CeK9ujjbFVL5c1PhLuStg1wxA7vQv7ce1EK0Gyvahk=
|
||||
go.opentelemetry.io/otel/trace v1.32.0 h1:WIC9mYrXf8TmY/EXuULKc8hR17vE+Hjv2cssQDe03fM=
|
||||
go.opentelemetry.io/otel/trace v1.32.0/go.mod h1:+i4rkvCraA+tG6AzwloGaCtkx53Fa+L+V8e9a7YvhT8=
|
||||
go.opentelemetry.io/otel/trace v1.34.0 h1:+ouXS2V8Rd4hp4580a8q23bg0azF2nI8cqLYnC8mh/k=
|
||||
golang.org/x/crypto v0.32.0 h1:euUpcYgM8WcP71gNpTqQCn6rC2t6ULUPiOzfWaXVVfc=
|
||||
golang.org/x/crypto v0.32.0/go.mod h1:ZnnJkOaASj8g0AjIduWNlq2NRxL0PlBrbKVyZ6V/Ugc=
|
||||
golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34=
|
||||
golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc=
|
||||
golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
|
||||
golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA=
|
||||
golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
|
||||
golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
|
||||
golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
|
||||
golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
|
||||
golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
|
||||
golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
|
||||
golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
|
||||
golang.org/x/oauth2 v0.22.0 h1:BzDx2FehcG7jJwgWLELCdmLuxk2i+x9UDpSiss2u0ZA=
|
||||
golang.org/x/oauth2 v0.22.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
|
||||
golang.org/x/oauth2 v0.24.0 h1:KTBBxWqUa0ykRPLtV69rRto9TLXcqYkeswu48x/gvNE=
|
||||
golang.org/x/oauth2 v0.24.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
|
||||
golang.org/x/oauth2 v0.26.0 h1:afQXWNNaeC4nvZ0Ed9XvCCzXM6UHJG7iCg0W4fPqSBE=
|
||||
golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
|
||||
golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
|
||||
golang.org/x/sync v0.13.0 h1:AauUjRAJ9OSnvULf/ARrrVywoJDy0YS2AwQ98I37610=
|
||||
golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
|
||||
golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
|
||||
golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
|
||||
golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
|
||||
golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
|
||||
golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
|
||||
golang.org/x/term v0.30.0 h1:PQ39fJZ+mfadBm0y5WlL4vlM7Sx1Hgf13sMIY2+QS9Y=
|
||||
golang.org/x/term v0.30.0/go.mod h1:NYYFdzHoI5wRh/h5tDMdMqCqPJZEuNqVR5xJLd/n67g=
|
||||
golang.org/x/term v0.31.0 h1:erwDkOK1Msy6offm1mOgvspSkslFnIGsFnxOKoufg3o=
|
||||
golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
|
||||
golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
|
||||
golang.org/x/text v0.23.0 h1:D71I7dUrlY+VX0gQShAThNGHFxZ13dGLBHQLVl1mJlY=
|
||||
golang.org/x/text v0.23.0/go.mod h1:/BLNzu4aZCJ1+kcD0DNRotWKage4q2rGVAg4o22unh4=
|
||||
golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
|
||||
golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
|
||||
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d h1:vU5i/LfpvrRCpgM/VPfJLg5KjxD3E+hfT1SH+d9zLwg=
|
||||
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
|
||||
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 h1:E7g+9GITq07hpfrRu66IVDexMakfv52eLZ2CXBWiKr4=
|
||||
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
|
||||
google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142 h1:wKguEg1hsxI2/L3hUYrpo1RVi48K+uTyzKqprwLXsb8=
|
||||
google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142/go.mod h1:d6be+8HhtEtucleCbxpPW9PA9XwISACu8nvpPqF0BVo=
|
||||
google.golang.org/genproto/googleapis/api v0.0.0-20241202173237-19429a94021a h1:OAiGFfOiA0v9MRYsSidp3ubZaBnteRUyn3xB2ZQ5G/E=
|
||||
google.golang.org/genproto/googleapis/api v0.0.0-20241202173237-19429a94021a/go.mod h1:jehYqy3+AhJU9ve55aNOaSml7wUXjF9x6z2LcCfpAhY=
|
||||
google.golang.org/genproto/googleapis/api v0.0.0-20250218202821-56aae31c358a h1:nwKuGPlUAt+aR+pcrkfFRrTU1BVrSmYyYMxYbUIVHr0=
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142 h1:e7S5W7MGGLaSu8j3YjdezkZ+m1/Nm0uRVRMEMGk26Xs=
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142/go.mod h1:UqMtugtsSgubUsoxbuAoiCXvqvErP7Gf0so0mK9tHxU=
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20241202173237-19429a94021a h1:hgh8P4EuoxpsuKMXX/To36nOFD7vixReXgn8lPGnt+o=
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20241202173237-19429a94021a/go.mod h1:5uTbfoYQed2U9p3KIj2/Zzm02PYhndfdmML0qC3q3FU=
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20250428153025-10db94c68c34 h1:h6p3mQqrmT1XkHVTfzLdNz1u7IhINeZkz67/xTbOuWs=
|
||||
google.golang.org/genproto/googleapis/rpc v0.0.0-20250428153025-10db94c68c34/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
|
||||
google.golang.org/grpc v1.67.1 h1:zWnc1Vrcno+lHZCOofnIMvycFcc0QRGIzm9dhnDX68E=
|
||||
google.golang.org/grpc v1.67.1/go.mod h1:1gLDyUQU7CTLJI90u3nXZ9ekeghjeM7pTDZlqFNg2AA=
|
||||
google.golang.org/grpc v1.70.0 h1:pWFv03aZoHzlRKHWicjsZytKAiYCtNS0dHbXnIdq7jQ=
|
||||
google.golang.org/grpc v1.70.0/go.mod h1:ofIJqVKDXx/JiXrwr2IG4/zwdH9txy3IlF40RmcJSQw=
|
||||
google.golang.org/grpc v1.72.0 h1:S7UkcVa60b5AAQTaO6ZKamFp1zMZSU0fGDK2WZLbBnM=
|
||||
google.golang.org/grpc v1.72.0/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM=
|
||||
google.golang.org/grpc/examples v0.0.0-20230224211313-3775f633ce20 h1:MLBCGN1O7GzIx+cBiwfYPwtmZ41U3Mn/cotLJciaArI=
|
||||
google.golang.org/grpc/examples v0.0.0-20230224211313-3775f633ce20/go.mod h1:Nr5H8+MlGWr5+xX/STzdoEqJrO+YteqFbMyCsrb6mH0=
|
||||
google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg=
|
||||
google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw=
|
||||
google.golang.org/protobuf v1.36.1 h1:yBPeRvTftaleIgM3PZ/WBIZ7XM/eEYAaEyCwvyjq/gk=
|
||||
google.golang.org/protobuf v1.36.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
|
||||
google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY=
|
||||
google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY=
|
||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
|
||||
gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@
|
|||
# \\\\\ Copyright 2024-present SPIKE contributors.
|
||||
# \\\\\\\ SPDX-License-Identifier: Apache-2.0
|
||||
|
||||
VERSION="v0.5.10"
|
||||
VERSION="v0.5.13"
|
||||
|
||||
git tag -s "$VERSION" -m "$VERSION"
|
||||
git push origin --tags
|
||||
233
spiffeid/auth.go
233
spiffeid/auth.go
|
|
@ -4,118 +4,248 @@
|
|||
|
||||
package spiffeid
|
||||
|
||||
// IsPilot checks if a given SPIFFE ID matches the SPIKE Pilot's SPIFFE ID.
|
||||
import "strings"
|
||||
|
||||
// IsPilot checks if a given SPIFFE ID matches the SPIKE Pilot's SPIFFE ID pattern.
|
||||
//
|
||||
// This function is used for identity verification to determine if the provided
|
||||
// SPIFFE ID belongs to a SPIKE pilot instance. It compares the input against
|
||||
// the expected pilot SPIFFE ID returned by SpikePilotSpiffeId().
|
||||
// the expected pilot SPIFFE ID pattern.
|
||||
//
|
||||
// The function supports two formats:
|
||||
// - Exact match: "spiffe://<trustRoot>/spike/pilot"
|
||||
// - Extended match with metadata: "spiffe://<trustRoot>/spike/pilot/<metadata>"
|
||||
//
|
||||
// This allows for instance-specific identifiers while maintaining compatibility
|
||||
// with the base pilot identity.
|
||||
//
|
||||
// Parameters:
|
||||
// - trustRoot: The trust domain root (e.g., "example.org")
|
||||
// - spiffeid: The SPIFFE ID string to check
|
||||
// - trustRoots: Comma-delimited list of trust domain roots
|
||||
// (e.g., "example.org,other.org")
|
||||
// - id: The SPIFFE ID string to check
|
||||
//
|
||||
// Returns:
|
||||
// - bool: true if the provided SPIFFE ID matches the pilot's ID, false
|
||||
// otherwise
|
||||
// - bool: true if the provided SPIFFE ID matches either the exact pilot ID
|
||||
// or an extended ID with additional path segments for any of the trust roots,
|
||||
// false otherwise
|
||||
//
|
||||
// Example usage:
|
||||
//
|
||||
// id := "spiffe://example.org/spike/pilot"
|
||||
// if IsPilot("example.org", id) {
|
||||
// baseId := "spiffe://example.org/spike/pilot"
|
||||
// extendedId := "spiffe://example.org/spike/pilot/instance-0"
|
||||
//
|
||||
// // Both will return true
|
||||
// if IsPilot("example.org,other.org", baseId) {
|
||||
// // Handle pilot-specific logic
|
||||
// }
|
||||
func IsPilot(trustRoot, id string) bool {
|
||||
return id == SpikePilot(trustRoot)
|
||||
//
|
||||
// if IsPilot("example.org,other.org", extendedId) {
|
||||
// // Also recognized as a pilot, with instance metadata
|
||||
// }
|
||||
func IsPilot(trustRoots, id string) bool {
|
||||
for _, root := range strings.Split(trustRoots, ",") {
|
||||
baseId := SpikePilot(strings.TrimSpace(root))
|
||||
// Check if the ID is either exactly the base ID or starts with the base ID
|
||||
// followed by "/"
|
||||
if id == baseId || strings.HasPrefix(id, baseId+"/") {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// IsPilotRecover checks if a given SPIFFE ID matches the SPIKE Pilot's
|
||||
// recovery SPIFFE ID.
|
||||
// recovery SPIFFE ID pattern.
|
||||
//
|
||||
// This function verifies if the provided SPIFFE ID corresponds to a SPIKE Pilot
|
||||
// instance with recovery capabilities by comparing it against the expected
|
||||
// recovery SPIFFE ID returned by SpikePilotRecoverSpiffeId().
|
||||
// recovery SPIFFE ID pattern.
|
||||
//
|
||||
// The function supports two formats:
|
||||
// - Exact match: "spiffe://<trustRoot>/spike/pilot/recover"
|
||||
// - Extended match with metadata: "spiffe://<trustRoot>/spike/pilot/recover/<metadata>"
|
||||
//
|
||||
// This allows for instance-specific identifiers while maintaining compatibility
|
||||
// with the base pilot recovery identity.
|
||||
//
|
||||
// Parameters:
|
||||
// - trustRoot: The trust domain root (e.g., "example.org")
|
||||
// - spiffeId: The SPIFFE ID string to check
|
||||
// - trustRoots: Comma-delimited list of trust domain roots
|
||||
// (e.g., "example.org,other.org")
|
||||
// - id: The SPIFFE ID string to check
|
||||
//
|
||||
// Returns:
|
||||
// - bool: true if the provided SPIFFE ID matches the pilot's recovery ID,
|
||||
// - bool: true if the provided SPIFFE ID matches either the exact pilot recovery ID
|
||||
// or an extended ID with additional path segments for any of the trust roots,
|
||||
// false otherwise
|
||||
//
|
||||
// Example usage:
|
||||
//
|
||||
// id := "spiffe://example.org/spike/pilot/recover"
|
||||
// if IsPilotRecover("example.org", id) {
|
||||
// baseId := "spiffe://example.org/spike/pilot/recover"
|
||||
// extendedId := "spiffe://example.org/spike/pilot/recover/instance-0"
|
||||
//
|
||||
// // Both will return true
|
||||
// if IsPilotRecover("example.org,other.org", baseId) {
|
||||
// // Handle recovery-specific logic
|
||||
// }
|
||||
func IsPilotRecover(trustRoot, id string) bool {
|
||||
return id == SpikePilotRecover(trustRoot)
|
||||
//
|
||||
// if IsPilotRecover("example.org,other.org", extendedId) {
|
||||
// // Also recognized as a pilot recovery, with instance metadata
|
||||
// }
|
||||
func IsPilotRecover(trustRoots, id string) bool {
|
||||
for _, root := range strings.Split(trustRoots, ",") {
|
||||
baseId := SpikePilotRecover(strings.TrimSpace(root))
|
||||
// Check if the ID is either exactly the base ID or starts with the base ID
|
||||
// followed by "/"
|
||||
if id == baseId || strings.HasPrefix(id, baseId+"/") {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// IsPilotRestore checks if a given SPIFFE ID matches the SPIKE Pilot's restore
|
||||
// SPIFFE ID.
|
||||
// SPIFFE ID pattern.
|
||||
//
|
||||
// This function verifies if the provided SPIFFE ID corresponds to a pilot
|
||||
// instance with restore capabilities by comparing it against the expected
|
||||
// restore SPIFFE ID returned by SpikePilotRestoreSpiffeId().
|
||||
// restore SPIFFE ID pattern.
|
||||
//
|
||||
// The function supports two formats:
|
||||
// - Exact match: "spiffe://<trustRoot>/spike/pilot/restore"
|
||||
// - Extended match with metadata: "spiffe://<trustRoot>/spike/pilot/restore/<metadata>"
|
||||
//
|
||||
// This allows for instance-specific identifiers while maintaining compatibility
|
||||
// with the base pilot restore identity.
|
||||
//
|
||||
// Parameters:
|
||||
// - trustRoot: The trust domain root (e.g., "example.org")
|
||||
// - spiffeId: The SPIFFE ID string to check
|
||||
// - trustRoots: Comma-delimited list of trust domain roots
|
||||
// (e.g., "example.org,other.org")
|
||||
// - id: The SPIFFE ID string to check
|
||||
//
|
||||
// Returns:
|
||||
// - bool: true if the provided SPIFFE ID matches the pilot's restore ID,
|
||||
// - bool: true if the provided SPIFFE ID matches either the exact pilot restore ID
|
||||
// or an extended ID with additional path segments for any of the trust roots,
|
||||
// false otherwise
|
||||
//
|
||||
// Example usage:
|
||||
//
|
||||
// id := "spiffe://example.org/spike/pilot/restore"
|
||||
// if IsPilotRestore("example.org", id) {
|
||||
// baseId := "spiffe://example.org/spike/pilot/restore"
|
||||
// extendedId := "spiffe://example.org/spike/pilot/restore/instance-0"
|
||||
//
|
||||
// // Both will return true
|
||||
// if IsPilotRestore("example.org,other.org", baseId) {
|
||||
// // Handle restore-specific logic
|
||||
// }
|
||||
func IsPilotRestore(trustRoot, spiffeId string) bool {
|
||||
return spiffeId == SpikePilotRestore(trustRoot)
|
||||
//
|
||||
// if IsPilotRestore("example.org,other.org", extendedId) {
|
||||
// // Also recognized as a pilot restore, with instance metadata
|
||||
// }
|
||||
func IsPilotRestore(trustRoots, id string) bool {
|
||||
for _, root := range strings.Split(trustRoots, ",") {
|
||||
baseId := SpikePilotRestore(strings.TrimSpace(root))
|
||||
// Check if the ID is either exactly the base ID or starts with the base ID
|
||||
// followed by "/"
|
||||
if id == baseId || strings.HasPrefix(id, baseId+"/") {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// IsKeeper checks if a given SPIFFE ID matches the SPIKE Keeper's SPIFFE ID.
|
||||
//
|
||||
// This function is used for identity verification to determine if the provided
|
||||
// SPIFFE ID belongs to a SPIKE Keeper instance. It compares the input against
|
||||
// the expected pilot SPIFFE ID returned by SpikeKeeperSpiffeId().
|
||||
// the expected keeper SPIFFE ID pattern.
|
||||
//
|
||||
// The function supports two formats:
|
||||
// - Exact match: "spiffe://<trustRoot>/spike/keeper"
|
||||
// - Extended match with metadata: "spiffe://<trustRoot>/spike/keeper/<metadata>"
|
||||
//
|
||||
// This allows for instance-specific identifiers while maintaining compatibility
|
||||
// with the base keeper identity.
|
||||
//
|
||||
// Parameters:
|
||||
// - trustRoot: The trust domain root (e.g., "example.org")
|
||||
// - spiffeid: The SPIFFE ID string to check
|
||||
// - trustRoots: Comma-delimited list of trust domain roots
|
||||
// (e.g., "example.org,other.org")
|
||||
// - id: The SPIFFE ID string to check
|
||||
//
|
||||
// Returns:
|
||||
// - bool: true if the provided SPIFFE ID matches the SPIKE Keeper's ID, false
|
||||
// otherwise
|
||||
// - bool: true if the provided SPIFFE ID matches either the exact
|
||||
// SPIKE Keeper's ID or an extended ID with additional path segments for any
|
||||
// of the trust roots, false otherwise
|
||||
//
|
||||
// Example usage:
|
||||
//
|
||||
// id := "spiffe://example.org/spike/keeper"
|
||||
// if IsKeeper("example.org", id) {
|
||||
// // Handle pilot-specific logic
|
||||
// baseId := "spiffe://example.org/spike/keeper"
|
||||
// extendedId := "spiffe://example.org/spike/keeper/instance-0"
|
||||
//
|
||||
// // Both will return true
|
||||
// if IsKeeper("example.org", baseId) {
|
||||
// // Handle keeper-specific logic
|
||||
// }
|
||||
func IsKeeper(trustRoot, id string) bool {
|
||||
return id == SpikeKeeper(trustRoot)
|
||||
//
|
||||
// if IsKeeper("example.org", extendedId) {
|
||||
// // Also recognized as a keeper, with instance metadata
|
||||
// }
|
||||
func IsKeeper(trustRoots, id string) bool {
|
||||
for _, root := range strings.Split(trustRoots, ",") {
|
||||
baseId := SpikeKeeper(strings.TrimSpace(root))
|
||||
// Check if the ID is either exactly the base ID or starts with the base ID
|
||||
// followed by "/"
|
||||
if id == baseId || strings.HasPrefix(id, baseId+"/") {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// IsNexus checks if the provided SPIFFE ID matches the SPIKE Nexus SPIFFE ID.
|
||||
//
|
||||
// The function compares the input SPIFFE ID against the configured Spike Nexus
|
||||
// SPIFFE ID from the environment. This is typically used for validating whether
|
||||
// a given identity represents the Nexus service.
|
||||
// SPIFFE ID pattern. This is typically used for validating whether a given
|
||||
// identity represents the Nexus service.
|
||||
//
|
||||
// The function supports two formats:
|
||||
// - Exact match: "spiffe://<trustRoot>/spike/nexus"
|
||||
// - Extended match with metadata: "spiffe://<trustRoot>/spike/nexus/<metadata>"
|
||||
//
|
||||
// This allows for instance-specific identifiers while maintaining compatibility
|
||||
// with the base Nexus identity.
|
||||
//
|
||||
// Parameters:
|
||||
// - trustRoot: The trust domain root (e.g., "example.org")
|
||||
// - spiffeid: The SPIFFE ID string to check
|
||||
// - trustRoots: Comma-delimited list of trust domain roots
|
||||
// (e.g., "example.org,other.org")
|
||||
// - id: The SPIFFE ID string to check
|
||||
//
|
||||
// Returns:
|
||||
// - bool: true if the SPIFFE ID matches the Nexus SPIFFE ID, false otherwise
|
||||
func IsNexus(trustRoot, id string) bool {
|
||||
return id == SpikeNexus(trustRoot)
|
||||
// - bool: true if the SPIFFE ID matches either the exact Nexus SPIFFE ID
|
||||
// or an extended ID with additional path segments for any of the
|
||||
// trust roots, false otherwise
|
||||
//
|
||||
// Example usage:
|
||||
//
|
||||
// baseId := "spiffe://example.org/spike/nexus"
|
||||
// extendedId := "spiffe://example.org/spike/nexus/instance-0"
|
||||
//
|
||||
// // Both will return true
|
||||
// if IsNexus("example.org", baseId) {
|
||||
// // Handle Nexus-specific logic
|
||||
// }
|
||||
//
|
||||
// if IsNexus("example.org", extendedId) {
|
||||
// // Also recognized as a Nexus, with instance metadata
|
||||
// }
|
||||
func IsNexus(trustRoots, id string) bool {
|
||||
for _, root := range strings.Split(trustRoots, ",") {
|
||||
baseId := SpikeNexus(strings.TrimSpace(root))
|
||||
// Check if the ID is either exactly the base ID or starts with the base ID
|
||||
// followed by "/"
|
||||
if id == baseId || strings.HasPrefix(id, baseId+"/") {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
// PeerCanTalkToAnyone is used for debugging purposes
|
||||
|
|
@ -126,16 +256,17 @@ func PeerCanTalkToAnyone(_, _ string) bool {
|
|||
// PeerCanTalkToKeeper checks if the provided SPIFFE ID matches the SPIKE Nexus
|
||||
// SPIFFE ID.
|
||||
//
|
||||
// This is used as a validator in SPIKE Keeper, because currently only SPIKE
|
||||
// This is used as a validator in SPIKE Keeper because currently only SPIKE
|
||||
// Nexus can talk to SPIKE Keeper.
|
||||
//
|
||||
// Parameters:
|
||||
// - trustRoot: The trust domain root (e.g., "example.org")
|
||||
// - trustRoots: Comma-delimited list of trust domain roots
|
||||
// (e.g., "example.org,other.org")
|
||||
// - peerSpiffeId: The SPIFFE ID string to check
|
||||
//
|
||||
// Returns:
|
||||
// - bool: true if the SPIFFE ID matches SPIKE Nexus' SPIFFE ID,
|
||||
// false otherwise
|
||||
func PeerCanTalkToKeeper(trustRoot, peerSpiffeId string) bool {
|
||||
return peerSpiffeId == SpikeNexus(trustRoot)
|
||||
// - bool: true if the SPIFFE ID matches SPIKE Nexus' SPIFFE ID for any of
|
||||
// the trust roots, false otherwise
|
||||
func PeerCanTalkToKeeper(trustRoots, peerSpiffeId string) bool {
|
||||
return IsNexus(trustRoots, peerSpiffeId)
|
||||
}
|
||||
|
|
|
|||
Loading…
Reference in New Issue