reenroller

Documentation

Index

• Constants
• func EnrollmentConfigValidation(enrollConfig *current.Enrollment) error
• func GetClient(client *lib.Client, bccsp *commonapi.BCCSP) *lib.Client
• type HSMDaemonReenroller
  • func NewHSMDaemonReenroller(cfg *current.Enrollment, homeDir string, bccsp *commonapi.BCCSP, ...) (*HSMDaemonReenroller, error)
  • func (r *HSMDaemonReenroller) IsCAReachable() bool
  • func (r *HSMDaemonReenroller) Reenroll() (*config.Response, error)
• type HSMReenroller
  • func NewHSMReenroller(cfg *current.Enrollment, homeDir string, bccsp *commonapi.BCCSP, ...) (*HSMReenroller, error)
  • func (r *HSMReenroller) IsCAReachable() bool
  • func (r *HSMReenroller) Reenroll() (*config.Response, error)
• type Identity
• type Instance
• type Reenroller
  • func New(cfg *current.Enrollment, homeDir string, bccsp *commonapi.BCCSP, ...) (*Reenroller, error)
  • func (r *Reenroller) DeleteKeystoreFile() error
  • func (r *Reenroller) InitClient() error
  • func (r *Reenroller) IsCAReachable() bool
  • func (r *Reenroller) LoadIdentity(certPemBytes []byte, keyPemBytes []byte, hsmEnabled bool) error
  • func (r *Reenroller) ReadKey() ([]byte, error)
  • func (r *Reenroller) Reenroll() (*config.Response, error)

Constants

const (
	// HSMClient is the name of container that contain the HSM client library
	HSMClient = "hsm-client"
	// CertGen is the name of container that runs the command to generate the certificate for the CA
	CertGen = "certgen"
)

Functions

func EnrollmentConfigValidation

func EnrollmentConfigValidation(enrollConfig *current.Enrollment) error

func GetClient

func GetClient(client *lib.Client, bccsp *commonapi.BCCSP) *lib.Client

Types

type HSMDaemonReenroller

type HSMDaemonReenroller struct {
	CAClient *lib.Client
	Identity Identity

	HomeDir   string
	Config    *current.Enrollment
	BCCSP     bool
	Timeout   time.Duration
	HSMConfig *config.HSMConfig
	Instance  Instance
	Client    k8sclient.Client
	Scheme    *runtime.Scheme
	NewKey    bool
}

func NewHSMDaemonReenroller

func NewHSMDaemonReenroller(cfg *current.Enrollment, homeDir string, bccsp *commonapi.BCCSP, timeoutstring string, hsmConfig *config.HSMConfig, instance Instance, client k8sclient.Client, scheme *runtime.Scheme, newKey bool) (*HSMDaemonReenroller, error)

func (*HSMDaemonReenroller) IsCAReachable

func (r *HSMDaemonReenroller) IsCAReachable() bool

func (*HSMDaemonReenroller) Reenroll

func (r *HSMDaemonReenroller) Reenroll() (*config.Response, error)

type HSMReenroller

type HSMReenroller struct {
	CAClient *lib.Client
	Identity Identity

	HomeDir   string
	Config    *current.Enrollment
	BCCSP     bool
	Timeout   time.Duration
	HSMConfig *config.HSMConfig
	Instance  Instance
	Client    k8sclient.Client
	Scheme    *runtime.Scheme
	NewKey    bool
}

func NewHSMReenroller

func NewHSMReenroller(cfg *current.Enrollment, homeDir string, bccsp *commonapi.BCCSP, timeoutstring string, hsmConfig *config.HSMConfig, instance Instance, client k8sclient.Client, scheme *runtime.Scheme, newKey bool) (*HSMReenroller, error)

func (*HSMReenroller) IsCAReachable

func (r *HSMReenroller) IsCAReachable() bool

func (*HSMReenroller) Reenroll

func (r *HSMReenroller) Reenroll() (*config.Response, error)

type Identity

type Identity interface {
	Reenroll(req *api.ReenrollmentRequest) (*lib.EnrollmentResponse, error)
	GetECert() *fabricx509.Signer
	GetClient() *lib.Client
}

type Instance

type Instance interface {
	metav1.Object
	EnrollerImage() string
	GetPullSecrets() []corev1.LocalObjectReference
	GetResource(current.Component) corev1.ResourceRequirements
	PVCName() string
}

type Reenroller

type Reenroller struct {
	Client   *lib.Client
	Identity Identity

	HomeDir string
	Config  *current.Enrollment
	BCCSP   bool
	Timeout time.Duration
	NewKey  bool
}

func New

func New(cfg *current.Enrollment, homeDir string, bccsp *commonapi.BCCSP, timeoutstring string, newKey bool) (*Reenroller, error)

func (*Reenroller) DeleteKeystoreFile

func (r *Reenroller) DeleteKeystoreFile() error

func (*Reenroller) InitClient

func (r *Reenroller) InitClient() error

func (*Reenroller) IsCAReachable

func (r *Reenroller) IsCAReachable() bool

func (*Reenroller) LoadIdentity

func (r *Reenroller) LoadIdentity(certPemBytes []byte, keyPemBytes []byte, hsmEnabled bool) error

func (*Reenroller) ReadKey

func (r *Reenroller) ReadKey() ([]byte, error)

func (*Reenroller) Reenroll

func (r *Reenroller) Reenroll() (*config.Response, error)