var ErrNoCredentials … var ErrAuthFailed … type CSIDriverServers … const secretField … type CSICreds … type CSIDriver … type LogGRPC … func NewCSIDriver(servers *CSIDriverServers) *CSIDriver { … } func (c *CSIDriver) goServe(started chan<- bool) { … } func (c *CSIDriver) Address() string { … } // Start runs a gRPC server with all enabled services. If an interceptor // is give, then it will be used. Otherwise, an interceptor which // handles simple credential checks and logs gRPC calls in JSON format // will be used. func (c *CSIDriver) Start(l net.Listener, interceptor grpc.UnaryServerInterceptor) error { … } func (c *CSIDriver) Stop() { … } func (c *CSIDriver) Close() { … } func (c *CSIDriver) IsRunning() bool { … } // SetDefaultCreds sets the default secrets for CSI creds. func (c *CSIDriver) SetDefaultCreds() { … } // goServe starts a grpc server. func goServe(server *grpc.Server, wg *sync.WaitGroup, listener net.Listener, started chan<- bool) { … } // stop stops a grpc server. func stop(lock *sync.Mutex, wg *sync.WaitGroup, server *grpc.Server, running bool) { … } // setDefaultCreds sets the default credentials, given a CSICreds instance. func setDefaultCreds(creds *CSICreds) { … } func (c *CSIDriver) callInterceptor(ctx context.Context, req interface{ … } func authInterceptor(creds *CSICreds, req interface{ … } func logGRPC(method string, request, reply interface{ … } func isAuthenticated(req interface{ … } func authenticateCreateVolume(req *csi.CreateVolumeRequest, creds *CSICreds) (bool, error) { … } func authenticateDeleteVolume(req *csi.DeleteVolumeRequest, creds *CSICreds) (bool, error) { … } func authenticateControllerPublishVolume(req *csi.ControllerPublishVolumeRequest, creds *CSICreds) (bool, error) { … } func authenticateControllerUnpublishVolume(req *csi.ControllerUnpublishVolumeRequest, creds *CSICreds) (bool, error) { … } func authenticateNodeStageVolume(req *csi.NodeStageVolumeRequest, creds *CSICreds) (bool, error) { … } func authenticateNodePublishVolume(req *csi.NodePublishVolumeRequest, creds *CSICreds) (bool, error) { … } func authenticateCreateSnapshot(req *csi.CreateSnapshotRequest, creds *CSICreds) (bool, error) { … } func authenticateDeleteSnapshot(req *csi.DeleteSnapshotRequest, creds *CSICreds) (bool, error) { … } func authenticateControllerValidateVolumeCapabilities(req *csi.ValidateVolumeCapabilitiesRequest, creds *CSICreds) (bool, error) { … } func credsCheck(secrets map[string]string, secretVal string) (bool, error) { … }
Codebase Browser
kubernetes