Run takes the given context and RunState along with any authz hooks and starts up a sansshell proxy server using the flags above to provide credentials.

WithAuthzHook adds an additional authz hook to be applied to the server.

WithClientPolicy appplies an optional OPA policy for determining outbound decisions.

WithCredSource applies a registered credential source with the mtls package.

WithDebugPort opens an additional port for a http debug page.

WithHostport applies the host:port to run the server.

WithJustification applies the justification param.

WithJustificationFunc applies a justification function.

WithLogger applies a logger that is used for all logging.

WithMetricsPort opens a HTTP endpoint for publishing metrics at the given addr.

WithMetricsRecorder enables metric instrumentations by inserting grpc metric interceptors and attaching recorder to the server runstate.

WithOtelTracing adds the OpenTelemetry gRPC interceptors to all servers and clients.

WithParsedClientPolicy appplies an optional OPA policy for determining outbound decisions.

WithParsedPolicy applies an already-parsed OPA policy used against incoming RPC requests.

WithPolicy applies an OPA policy used against incoming RPC requests.

WithRawServerOption allows one access to the RPC Server object.

WithStreamClientInterceptor adds an additional stream client interceptor.

WithStreamInterceptor adds an additional stream server interceptor.

WithTlsConfig applies a supplied tls.Config object to the gRPC server.

WithUnaryClientInterceptor adds an additional unary client interceptor.

WithUnaryInterceptor adds an additional unary server interceptor.