Vihren Atlas

local_store_cert_provider.go ×11

Joint frontier

unlabeled · c_8060f9c76bcd

1 test · 2548 LOC · 90 files · introduces 1 test · 47 LOC · 4 files

Introduces — evidence that enters the hierarchy at this concept

Code
21 ranges47 lines · 4 files
Tests
1 test

Contains — complete concept membership

All code (extent)
480 ranges2548 lines · 90 files · Browse complete extent
All tests (intent)
1 testBrowse complete intent

Neighbourhood graph

The orange circle is the focus. Violet and green circles are every ancestor and descendant, broader and narrower, at any distance; blue squares and pink diamonds are the introduced files and exact introduced tests of every visible concept, not only the focus's. Arrows point from broader to narrower concepts and bridge only concepts omitted from this view. Undirected links show source or test introduction. Concept and file size follows LOC; exact test nodes use test-count units.

Introduced files, introduced tests, and structurally relevant concept specialization

In the embedded map, ordinary wheel input scrolls the page; use the visible controls to zoom and drag to pan. Open the full-screen map for canvas navigation: wheel pans, Ctrl/Command plus wheel zooms, and arrow keys pan when this region is focused. On touch screens, open the full-screen map to pan or pinch. If JavaScript or WebGL is unavailable, use the native relationship evidence on this page.

Introduced files, introduced tests, and structurally relevant concept specializationlocal_store_tls_provider.go ×4 · 17 introduced LOClocal_store_tls_provider…local_store_cert_provider.go ×51 · 202 introduced LOClocal_store_cert_provide…tls.go ×2 · 4 introduced LOCtls.go ×2local_store_tls_provider.go ×1 · 6 introduced LOClocal_store_tls_provider…factory.go ×1 · 5 introduced LOCfactory.go ×1factory.go ×6 · 20 introduced LOCfactory.go ×6tls.go ×20 · 133 introduced LOCtls.go ×20local_store_cert_provider.go ×2 · 22 introduced LOClocal_store_cert_provide…local_store_tls_provider.go ×3 · 21 introduced LOClocal_store_tls_provider…tls_factory.go ×1 · 1 introduced LOCtls_factory.go ×1tls_factory.go ×22 · 28 introduced LOCtls_factory.go ×22static_client.go ×1 · 1 introduced LOCstatic_client.go ×1static_client.go ×1 · 1 introduced LOCstatic_client.go ×1local_store_tls_provider.go ×5 · 36 introduced LOClocal_store_tls_provider…config.go ×1 · 3 introduced LOCconfig.go ×1convert.go ×1 · 3 introduced LOCconvert.go ×1monitor.go ×2 · 11 introduced LOCmonitor.go ×2tags.go ×1 · 3 introduced LOCtags.go ×1tls_config_helper.go ×2 · 14 introduced LOCtls_config_helper.go ×2zap_logger.go ×1 · 2 introduced LOCzap_logger.go ×1config.go ×1 · 4 introduced LOCconfig.go ×1local_store_tls_provider.go ×1 · 5 introduced LOClocal_store_tls_provider…tags.go ×1 · 3 introduced LOCtags.go ×1zap_tag.go ×1 · 5 introduced LOCzap_tag.go ×1noop_moving_window_average.go ×1 · 2 introduced LOCnoop_moving_window_avera…search_attribute.go ×12 · 121 introduced LOCsearch_attribute.go ×12key.go ×1 · 6 introduced LOCkey.go ×1collection.go ×1 · 1 introduced LOCcollection.go ×1collection.go ×1 · 2 introduced LOCcollection.go ×1setting_gen.go ×1 · 9 introduced LOCsetting_gen.go ×1static_client.go ×1 · 2 introduced LOCstatic_client.go ×1collection.go ×1 · 5 introduced LOCcollection.go ×1collection.go ×2 · 4 introduced LOCcollection.go ×2collection.go ×1 · 3 introduced LOCcollection.go ×1collection.go ×2 · 6 introduced LOCcollection.go ×2static_client.go ×2 · 6 introduced LOCstatic_client.go ×2setting_gen.go ×1 · 2 introduced LOCsetting_gen.go ×1collection.go ×1 · 23 introduced LOCcollection.go ×1collection.go ×1 · 9 introduced LOCcollection.go ×1convert.go ×1 · 3 introduced LOCconvert.go ×1collection.go ×1 · 2 introduced LOCcollection.go ×1collection.go ×2 · 3 introduced LOCcollection.go ×2collection.go ×1 · 2 introduced LOCcollection.go ×1priority.go ×1 · 3 introduced LOCpriority.go ×1tags.go ×1 · 3 introduced LOCtags.go ×1setting_gen.go ×51 · 335 introduced LOCsetting_gen.go ×51grpc_resolver.go ×2 · 7 introduced LOCgrpc_resolver.go ×2noop_impl.go ×1 · 3 introduced LOCnoop_impl.go ×1predicates.pb.go ×21 · 54 introduced LOCpredicates.pb.go ×21service.pb.go ×2 · 342 introduced LOCservice.pb.go ×2message.pb.go ×2 · 20 introduced LOCmessage.pb.go ×2zap_logger.go ×3 · 17 introduced LOCzap_logger.go ×3constants.go ×1 · 6 introduced LOCconstants.go ×1task.pb.go ×1 · 3 introduced LOCtask.pb.go ×1message.pb.go ×2 · 442 introduced LOCmessage.pb.go ×2tags.go ×1 · 3 introduced LOCtags.go ×1defs.go ×5 · 91 introduced LOCdefs.go ×5zap_logger.go ×1 · 6 introduced LOCzap_logger.go ×1zap_logger.go ×1 · 1 introduced LOCzap_logger.go ×1zap_logger.go ×6 · 26 introduced LOCzap_logger.go ×6zap_logger.go ×4 · 12 introduced LOCzap_logger.go ×4zap_tag.go ×1 · 6 introduced LOCzap_tag.go ×1zap_logger.go ×1 · 2 introduced LOCzap_logger.go ×1zap_logger.go ×1 · 2 introduced LOCzap_logger.go ×1noop_logger.go ×1 · 3 introduced LOCnoop_logger.go ×1zap_logger.go ×1 · 2 introduced LOCzap_logger.go ×1zap_logger.go ×1 · 7 introduced LOCzap_logger.go ×1tags.go ×9 · 37 introduced LOCtags.go ×9message.pb.go ×2 · 49 introduced LOCmessage.pb.go ×2cluster.pb.go ×2 · 200 introduced LOCcluster.pb.go ×2wildcard.go ×1 · 2 introduced LOCwildcard.go ×1wildcard.go ×4 · 14 introduced LOCwildcard.go ×4retrypolicy.go ×3 · 19 introduced LOCretrypolicy.go ×3message.pb.go ×2 · 20 introduced LOCmessage.pb.go ×2payload.go ×1 · 3 introduced LOCpayload.go ×1TestOperatorServiceMetadata, TestWorkflowServiceMetadata · 0 introduced LOCTestOperatorServiceMetad…go.temporal.io/server/api/adminservice/v1/request_response.pb.go · 6661 LOCv1/request_response.pb.g…go.temporal.io/server/api/adminservice/v1/service.pb.go · 297 LOCv1/service.pb.gogo.temporal.io/server/api/chasm/v1/message.pb.go · 230 LOCv1/message.pb.gogo.temporal.io/server/api/clock/v1/message.pb.go · 217 LOCv1/message.pb.gogo.temporal.io/server/api/cluster/v1/message.pb.go · 366 LOCv1/message.pb.gogo.temporal.io/server/api/common/v1/api_category.pb.go · 230 LOCv1/api_category.pb.gogo.temporal.io/server/api/common/v1/dlq.pb.go · 319 LOCv1/dlq.pb.gogo.temporal.io/server/api/deployment/v1/message.pb.go · 4650 LOCv1/message.pb.gogo.temporal.io/server/api/enums/v1/cluster.pb.go · 233 LOCv1/cluster.pb.gogo.temporal.io/server/api/enums/v1/common.pb.go · 288 LOCv1/common.pb.gogo.temporal.io/server/api/enums/v1/dlq.pb.go · 211 LOCv1/dlq.pb.gogo.temporal.io/server/api/enums/v1/fairness_state.pb.go · 147 LOCv1/fairness_state.pb.gogo.temporal.io/server/api/enums/v1/nexus.pb.go · 182 LOCv1/nexus.pb.gogo.temporal.io/server/api/enums/v1/predicate.pb.go · 194 LOCv1/predicate.pb.gogo.temporal.io/server/api/enums/v1/replication.pb.go · 338 LOCv1/replication.pb.gogo.temporal.io/server/api/enums/v1/task.pb.go · 480 LOCv1/task.pb.gogo.temporal.io/server/api/enums/v1/workflow.pb.go · 299 LOCv1/workflow.pb.gogo.temporal.io/server/api/enums/v1/workflow_task_type.pb.go · 148 LOCv1/workflow_task_type.pb…go.temporal.io/server/api/errordetails/v1/message.pb.go · 649 LOCv1/message.pb.gogo.temporal.io/server/api/health/v1/message.pb.go · 324 LOCv1/message.pb.gogo.temporal.io/server/api/history/v1/message.pb.go · 522 LOCv1/message.pb.gogo.temporal.io/server/api/historyservice/v1/request_response.pb.go · 12003 LOCv1/request_response.pb.g…go.temporal.io/server/api/historyservice/v1/service.pb.go · 452 LOCv1/service.pb.gogo.temporal.io/server/api/matchingservice/v1/request_response.pb.go · 6878 LOCv1/request_response.pb.g…go.temporal.io/server/api/matchingservice/v1/service.pb.go · 274 LOCv1/service.pb.gogo.temporal.io/server/api/metrics/v1/message.pb.go · 128 LOCv1/message.pb.gogo.temporal.io/server/api/namespace/v1/message.pb.go · 138 LOCv1/message.pb.gogo.temporal.io/server/api/persistence/v1/chasm.pb.go · 1215 LOCv1/chasm.pb.gogo.temporal.io/server/api/persistence/v1/chasm_visibility.pb.go · 170 LOCv1/chasm_visibility.pb.g…go.temporal.io/server/api/persistence/v1/cluster_metadata.pb.go · 313 LOCv1/cluster_metadata.pb.g…go.temporal.io/server/api/persistence/v1/executions.pb.go · 5768 LOCv1/executions.pb.gogo.temporal.io/server/api/persistence/v1/history_tree.pb.go · 298 LOCv1/history_tree.pb.gogo.temporal.io/server/api/persistence/v1/hsm.pb.go · 929 LOCv1/hsm.pb.gogo.temporal.io/server/api/persistence/v1/namespaces.pb.go · 560 LOCv1/namespaces.pb.gogo.temporal.io/server/api/persistence/v1/nexus.pb.go · 509 LOCv1/nexus.pb.gogo.temporal.io/server/api/persistence/v1/predicates.go-helpers.pb.go · 413 LOCv1/predicates.go-helpers…go.temporal.io/server/api/persistence/v1/predicates.pb.go · 864 LOCv1/predicates.pb.gogo.temporal.io/server/api/persistence/v1/queue_metadata.pb.go · 129 LOCv1/queue_metadata.pb.gogo.temporal.io/server/api/persistence/v1/queues.pb.go · 641 LOCv1/queues.pb.gogo.temporal.io/server/api/persistence/v1/task_queues.pb.go · 924 LOCv1/task_queues.pb.gogo.temporal.io/server/api/persistence/v1/tasks.pb.go · 870 LOCv1/tasks.pb.gogo.temporal.io/server/api/persistence/v1/update.pb.go · 455 LOCv1/update.pb.gogo.temporal.io/server/api/persistence/v1/workflow_mutable_state.pb.go · 560 LOCv1/workflow_mutable_stat…go.temporal.io/server/api/replication/v1/message.pb.go · 2481 LOCv1/message.pb.gogo.temporal.io/server/api/taskqueue/v1/message.pb.go · 1363 LOCv1/message.pb.gogo.temporal.io/server/api/token/v1/message.pb.go · 809 LOCv1/message.pb.gogo.temporal.io/server/api/visibilityservice/v1/request_response.pb.go · 426 LOCv1/request_response.pb.g…go.temporal.io/server/api/workflow/v1/message.pb.go · 302 LOCv1/message.pb.gogo.temporal.io/server/chasm/library.go · 60 LOCchasm/library.gogo.temporal.io/server/chasm/registrable_component.go · 233 LOCchasm/registrable_compon…go.temporal.io/server/chasm/search_attribute.go · 525 LOCchasm/search_attribute.g…go.temporal.io/server/common/aggregate/noop_moving_window_average.go · 13 LOCaggregate/noop_moving_wi…go.temporal.io/server/common/auth/tls_config_helper.go · 225 LOCauth/tls_config_helper.g…go.temporal.io/server/common/backoff/retrypolicy.go · 347 LOCbackoff/retrypolicy.gogo.temporal.io/server/common/build/build.go · 56 LOCbuild/build.gogo.temporal.io/server/common/config/config.go · 879 LOCconfig/config.gogo.temporal.io/server/common/convert/convert.go · 79 LOCconvert/convert.gogo.temporal.io/server/common/dynamicconfig/collection.go · 779 LOCdynamicconfig/collection…go.temporal.io/server/common/dynamicconfig/deepcopy.go · 78 LOCdynamicconfig/deepcopy.g…go.temporal.io/server/common/dynamicconfig/gradual_change.go · 196 LOCdynamicconfig/gradual_ch…go.temporal.io/server/common/dynamicconfig/key.go · 21 LOCdynamicconfig/key.gogo.temporal.io/server/common/dynamicconfig/registry.go · 44 LOCdynamicconfig/registry.g…go.temporal.io/server/common/dynamicconfig/setting_gen.go · 1972 LOCdynamicconfig/setting_ge…go.temporal.io/server/common/dynamicconfig/shared_structure.go · 69 LOCdynamicconfig/shared_str…go.temporal.io/server/common/dynamicconfig/static_client.go · 31 LOCdynamicconfig/static_cli…go.temporal.io/server/common/log/noop_logger.go · 25 LOClog/noop_logger.gogo.temporal.io/server/common/log/tag/tags.go · 1039 LOCtag/tags.gogo.temporal.io/server/common/log/tag/zap_tag.go · 242 LOCtag/zap_tag.gogo.temporal.io/server/common/log/zap_logger.go · 318 LOClog/zap_logger.gogo.temporal.io/server/common/membership/grpc_resolver.go · 169 LOCmembership/grpc_resolver…go.temporal.io/server/common/membership/ringpop/factory.go · 270 LOCringpop/factory.gogo.temporal.io/server/common/membership/ringpop/monitor.go · 484 LOCringpop/monitor.gogo.temporal.io/server/common/metrics/defs.go · 76 LOCmetrics/defs.gogo.temporal.io/server/common/metrics/defs_base.go · 30 LOCmetrics/defs_base.gogo.temporal.io/server/common/metrics/noop_impl.go · 58 LOCmetrics/noop_impl.gogo.temporal.io/server/common/metrics/option.go · 21 LOCmetrics/option.gogo.temporal.io/server/common/metrics/registry.go · 75 LOCmetrics/registry.gogo.temporal.io/server/common/metrics/tags.go · 619 LOCmetrics/tags.gogo.temporal.io/server/common/payload/payload.go · 127 LOCpayload/payload.gogo.temporal.io/server/common/persistence/noop_health_signal_aggregator.go · 31 LOCpersistence/noop_health_…go.temporal.io/server/common/rpc/encryption/local_store_cert_provider.go · 586 LOCencryption/local_store_c…go.temporal.io/server/common/rpc/encryption/local_store_per_host_cert_provider_map.go · 85 LOCencryption/local_store_p…go.temporal.io/server/common/rpc/encryption/local_store_tls_provider.go · 506 LOCencryption/local_store_t…go.temporal.io/server/common/rpc/encryption/tls_factory.go · 156 LOCencryption/tls_factory.g…go.temporal.io/server/common/searchattribute/sadefs/constants.go · 396 LOCsadefs/constants.gogo.temporal.io/server/common/tasks/priority.go · 81 LOCtasks/priority.gogo.temporal.io/server/common/util/wildcard.go · 50 LOCutil/wildcard.gogo.temporal.io/server/service/history/tasks/key.go · 144 LOCtasks/key.gogo.temporal.io/server/tests/testutils/certificate.go · 126 LOCtestutils/certificate.gogo.temporal.io/server/tests/testutils/tls.go · 186 LOCtestutils/tls.goTestOperatorServiceMetadata · introduced test · go.temporal.io/server/common/api/TestOperatorServiceMetadataTestOperatorServiceMetad…TestWorkflowServiceMetadata · introduced test · go.temporal.io/server/common/api/TestWorkflowServiceMetadataTestWorkflowServiceMetad…TestTSCBWithDynamicSettings · introduced test · go.temporal.io/server/common/circuitbreaker/TestTSCBWithDynamicSettingsTestTSCBWithDynamicSetti…TestDeepCopy_OtherReferenceTypes_Nil · introduced test · go.temporal.io/server/common/dynamicconfig/TestDeepCopy_OtherReferenceTypes_NilTestDeepCopy_OtherRefere…TestRingpopMutualTLS · introduced test · go.temporal.io/server/common/membership/ringpop/TestRingpopSuite/TestRingpopMutualTLSTestRingpopMutualTLSTestMutexMapBaggage · introduced test · go.temporal.io/server/common/metrics/TestBaggageBenchSuite/TestMutexMapBaggageTestMutexMapBaggageTestSyncMapBaggage · introduced test · go.temporal.io/server/common/metrics/TestBaggageBenchSuite/TestSyncMapBaggageTestSyncMapBaggageTestIsEnabled · introduced test · go.temporal.io/server/common/rpc/encryption/TestTLSConfigSuite/TestIsEnabledTestIsEnabledTestIsSystemWorker · introduced test · go.temporal.io/server/common/rpc/encryption/TestTLSConfigSuite/TestIsSystemWorkerTestIsSystemWorkerTestAPIPrioritiesOrdered · introduced test · go.temporal.io/server/service/matching/configs/TestQuotasSuite/TestAPIPrioritiesOrderedTestAPIPrioritiesOrderedTestAPIToPriorityMapping · introduced test · go.temporal.io/server/service/matching/configs/TestQuotasSuite/TestAPIToPriorityMappingTestAPIToPriorityMappingFocused concept · local_store_cert_provider.go ×11 · 47 introduced LOClocal_store_cert_provide…

Graph controls are ready.

Interactive rendering requires JavaScript and WebGL. Use the native relationship evidence on this page while the interactive map is unavailable.

Native relationship evidence

Every exact file and test below is linked only from the concept that introduces it.

Introduced tests

Every collected test enters the hierarchy at exactly one concept.

1 test introduced at this concept.

Introduced code

Every collected source range enters the hierarchy at exactly one concept.

4 files ranked by introduced lines: 47 introduced LOC across 21 ranges. Expand a file to inspect source; the > gutter marks introduced lines.

go.temporal.io/server/common/rpc/encryption/local_store_cert_provider.go 24 introduced LOC · 11 ranges

Open complete file

271
272 if certFile != "" {
273 > s.logger.Info("loading certificate from file", tag.TLSCertFile(certFile)) local_store_cert_provider.go
274 > certBytes, err = os.ReadFile(certFile)
275 > if err != nil {
276 return nil, err
277 }
284
285 if keyFile != "" {
286 > s.logger.Info("loading private key from file", tag.TLSKeyFile(keyFile)) local_store_cert_provider.go
287 > keyBytes, err = os.ReadFile(keyFile)
288 > if err != nil {
289 return nil, err
290 }
357 certs = caCertsFromData
358 } else {
359 > certPool = caPoolFromFiles local_store_cert_provider.go
360 > certs = caCertsFromFiles
361 > }
362
363 return certPool, certs, nil
431 }
432
433 > s.logger.Info("loading CA certs from", tag.TLSCertFiles(caFiles)) local_store_cert_provider.go
434 > return buildCAPool(caFiles, os.ReadFile)
435 }
436
go.temporal.io/server/common/rpc/encryption/local_store_tls_provider.go 10 introduced LOC · 5 ranges

Open complete file

345 // If mTLS enabled
346 if requireClientAuth {
347 > clientAuthType = tls.RequireAndVerifyClientCert local_store_tls_provider.go
348 >
349 > ca, err := certProvider.FetchClientCAs()
350 > if err != nil {
351 return nil, fmt.Errorf("failed to fetch client CAs: %v", err)
352 }
353
354 > clientCaPool = ca local_store_tls_provider.go
355 }
356 if remoteAddress != "" { // remoteAddress=="" when we return initial tls.Config object when configuring server
381 // mTLS enabled, present certificate
382 if isAuthRequired {
383 > getCert = func() (*tls.Certificate, error) { local_store_tls_provider.go
384 > cert, err := clientProvider.FetchClientCertificate(isWorker)
385 > if err != nil {
386 return nil, err
387 }
388
389 > if cert == nil { local_store_tls_provider.go
390 return nil, fmt.Errorf("client auth required, but no certificate provided")
391 }
392 > return cert, nil local_store_tls_provider.go
393 }
394 }
go.temporal.io/server/common/log/tag/tags.go 9 introduced LOC · 3 ranges

Open complete file

959
960 // TLSCertFile returns tag for TLS cert file name
961 > func TLSCertFile(filePath string) ZapTag { tags.go
962 > return NewStringTag("tls-cert-file", filePath)
963 > }
964
965 // TLSKeyFile returns tag for TLS key file
966 > func TLSKeyFile(filePath string) ZapTag { tags.go
967 > return NewStringTag("tls-key-file", filePath)
968 > }
969
970 // TLSCertFiles returns tag for TLS cert file names
971 > func TLSCertFiles(filePaths []string) ZapTag { tags.go
972 > return NewStringsTag("tls-cert-files", filePaths)
973 > }
974
975 // Timeout returns tag for timeout
go.temporal.io/server/common/auth/tls_config_helper.go 4 introduced LOC · 2 ranges

Open complete file

46
47 if getCert != nil {
48 > c.GetClientCertificate = func(info *tls.CertificateRequestInfo) (*tls.Certificate, error) { tls_config_helper.go
49 > return getCert()
50 > }
51 }
52 c.RootCAs = rootCAs
77 return ""
78 }
79 > return state.PeerCertificates[0].Subject.CommonName tls_config_helper.go
80 }
81

Direct hierarchy

Children