commit 9ffa1f9577003ab70a6b483475874f3552d1ccc3
author Serge Bazanski <serge@monogon.tech> Wed Sep 01 15:42:23 2021 +0200
committer Sergiusz Bazanski <serge@monogon.tech> Thu Sep 02 10:38:15 2021 +0000
tree a688d02424e8601ed830d12021b5867688d31438
parent 6bd415920b84bd695038caeb386f1e97184f0c51

m/n/core/curator: authenticated RPC

This adds authentication middleware (server interceptors) for gRPC
services running on the public curator listener.

Most of this code is testing harnesses to start up just the curator
listener with enough of a PKI infrastructure copy from a real Metropolis
cluster to be able to start running tests against GetRegisterTicket.

Change-Id: I429ff29e3c1233d74e8da619ddb543d56bc051b9
Reviewed-on: https://review.monogon.dev/c/monogon/+/311
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>

metropolis/proto/api/BUILD.bazel

diff --git a/metropolis/proto/api/BUILD.bazel b/metropolis/proto/api/BUILD.bazel
index 61d14fb..ef8885d 100644
--- a/metropolis/proto/api/BUILD.bazel
+++ b/metropolis/proto/api/BUILD.bazel
@@ -11,6 +11,7 @@
         "management.proto",
     ],
     visibility = ["//visibility:public"],
+    deps = ["//metropolis/proto/ext:ext_proto"],
 )
 
 go_proto_library(
@@ -19,6 +20,7 @@
     importpath = "source.monogon.dev/metropolis/proto/api",
     proto = ":api_proto",
     visibility = ["//visibility:public"],
+    deps = ["//metropolis/proto/ext:go_default_library"],
 )
 
 go_library(