Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

prepare SDK for the distributed KES implementation #5

Merged
merged 1 commit into from
Aug 9, 2023
Merged

Conversation

aead
Copy link
Member

@aead aead commented Jun 20, 2023

This commit changes the SDK w.r.t. to the upcoming distributed KES server implementation.

In particular, the listing code has been changed
to a paginated implementation. However, backwards
compatibility with existing KES servers is maintained.

@aead aead requested review from shtripat and kannappanr June 20, 2023 15:14
@aead aead force-pushed the kes-dist branch 3 times, most recently from aa231b7 to ec45caf Compare June 22, 2023 12:57
client.go Show resolved Hide resolved
enclave.go Outdated Show resolved Hide resolved
@shtripat
Copy link

Changes look good. Please check and fix lint issues

@aead
Copy link
Member Author

aead commented Aug 7, 2023

PTAL @shtripat

This commit changes the SDK w.r.t. to the upcoming
distributed KES server implementation.

In particular, the listing code has been changed
to a paginated implementation. However, backwards
compatibility with existing KES servers is maintained.

Signed-off-by: Andreas Auernhammer <[email protected]>
Copy link

@shtripat shtripat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code looks fine. Approved.
Have couple of questions.

@@ -38,171 +35,14 @@ type IdentityInfo struct {
Policy string // Name of the associated policy
CreatedAt time.Time // Point in time when the identity was created
CreatedBy Identity // Identity that created the identity
ExpiresAt time.Time
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it like ExpiresAt can be later compared to now() +TTL ? What is use case of having both?

// Policy contains a set of rules that explicitly allow
// or deny HTTP requests.
// A Rule controls HTTP requests and is part of a policy.
type Rule struct{}
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we have plans to add Rule attributes or some functions later?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, in the future we will add options to tune access control

@aead aead merged commit a0d7f69 into main Aug 9, 2023
5 checks passed
@aead aead deleted the kes-dist branch August 9, 2023 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants