certificate

Documentation

Index

• type CertificateManager
  • func New(client k8sclient.Client, scheme *runtime.Scheme) *CertificateManager
  • func (c *CertificateManager) CertificateExpiring(certType common.SecretType, instance v1.Object, numSecondsBeforeExpire int64) (expiring bool, expireDate time.Time, err error)
  • func (c *CertificateManager) CheckCertificatesForExpire(instance v1.Object, numSecondsBeforeExpire int64) (statusType current.IBPCRStatusType, message string, err error)
  • func (c *CertificateManager) Expires(cert []byte, numSecondsBeforeExpire int64) (expiring bool, expireDate time.Time, err error)
  • func (c *CertificateManager) GetDurationToNextRenewal(certType common.SecretType, instance v1.Object, numSecondsBeforeExpire int64) (time.Duration, error)
  • func (c *CertificateManager) GetDurationToNextRenewalForCert(certName string, cert []byte, instance v1.Object, numSecondsBeforeExpire int64) (time.Duration, error)
  • func (c *CertificateManager) GetExpireDate(pemBytes []byte) (time.Time, error)
  • func (c *CertificateManager) GetKey(name, namespace string) ([]byte, error)
  • func (c *CertificateManager) GetReenroller(certType common.SecretType, spec *current.EnrollmentSpec, ...) (Reenroller, error)
  • func (c *CertificateManager) GetSecret(name, namespace string) (*corev1.Secret, error)
  • func (c *CertificateManager) GetSignCert(name, namespace string) ([]byte, error)
  • func (c *CertificateManager) GetSignCertAndKey(certType common.SecretType, instance v1.Object, hsmEnabled bool) ([]byte, []byte, error)
  • func (c *CertificateManager) ReenrollCert(certType common.SecretType, reenroller Reenroller, instance v1.Object, ...) error
  • func (c *CertificateManager) RenewCert(certType common.SecretType, instance Instance, spec *current.EnrollmentSpec, ...) error
  • func (c *CertificateManager) UpdateKey(name string, key []byte, instance v1.Object) error
  • func (c *CertificateManager) UpdateSecret(instance v1.Object, name string, data map[string][]byte) error
  • func (c *CertificateManager) UpdateSignCert(name string, cert []byte, instance v1.Object) error
• type Instance
• type Reenroller

Types

type CertificateManager

type CertificateManager struct {
	Client k8sclient.Client
	Scheme *runtime.Scheme
}

func New

func New(client k8sclient.Client, scheme *runtime.Scheme) *CertificateManager

func (*CertificateManager) CertificateExpiring

func (c *CertificateManager) CertificateExpiring(certType common.SecretType, instance v1.Object, numSecondsBeforeExpire int64) (expiring bool, expireDate time.Time, err error)

func (*CertificateManager) CheckCertificatesForExpire

func (c *CertificateManager) CheckCertificatesForExpire(instance v1.Object, numSecondsBeforeExpire int64) (statusType current.IBPCRStatusType, message string, err error)

func (*CertificateManager) Expires

func (c *CertificateManager) Expires(cert []byte, numSecondsBeforeExpire int64) (expiring bool, expireDate time.Time, err error)

func (*CertificateManager) GetDurationToNextRenewal

func (c *CertificateManager) GetDurationToNextRenewal(certType common.SecretType, instance v1.Object, numSecondsBeforeExpire int64) (time.Duration, error)

func (*CertificateManager) GetDurationToNextRenewalForCert

func (c *CertificateManager) GetDurationToNextRenewalForCert(certName string, cert []byte, instance v1.Object, numSecondsBeforeExpire int64) (time.Duration, error)

func (*CertificateManager) GetExpireDate

func (c *CertificateManager) GetExpireDate(pemBytes []byte) (time.Time, error)

func (*CertificateManager) GetKey

func (c *CertificateManager) GetKey(name, namespace string) ([]byte, error)

func (*CertificateManager) GetReenroller

func (c *CertificateManager) GetReenroller(certType common.SecretType, spec *current.EnrollmentSpec, bccsp *commonapi.BCCSP, storagePath string, certPemBytes, keyPemBytes []byte, hsmEnabled bool, newKey bool) (Reenroller, error)

func (*CertificateManager) GetSecret

func (c *CertificateManager) GetSecret(name, namespace string) (*corev1.Secret, error)

func (*CertificateManager) GetSignCert

func (c *CertificateManager) GetSignCert(name, namespace string) ([]byte, error)

func (*CertificateManager) GetSignCertAndKey

func (c *CertificateManager) GetSignCertAndKey(certType common.SecretType, instance v1.Object, hsmEnabled bool) ([]byte, []byte, error)

func (*CertificateManager) ReenrollCert

func (c *CertificateManager) ReenrollCert(certType common.SecretType, reenroller Reenroller, instance v1.Object, hsmEnabled bool) error

func (*CertificateManager) RenewCert

func (c *CertificateManager) RenewCert(certType common.SecretType, instance Instance, spec *current.EnrollmentSpec, bccsp *commonapi.BCCSP, storagePath string, hsmEnabled bool, newKey bool) error

func (*CertificateManager) UpdateKey

func (c *CertificateManager) UpdateKey(name string, key []byte, instance v1.Object) error

func (*CertificateManager) UpdateSecret

func (c *CertificateManager) UpdateSecret(instance v1.Object, name string, data map[string][]byte) error

func (*CertificateManager) UpdateSignCert

func (c *CertificateManager) UpdateSignCert(name string, cert []byte, instance v1.Object) error

type Instance

type Instance interface {
	v1.Object
	UsingHSMProxy() bool
	IsHSMEnabled() bool
	EnrollerImage() string
	GetPullSecrets() []corev1.LocalObjectReference
	GetResource(current.Component) corev1.ResourceRequirements
	PVCName() string
}

type Reenroller

type Reenroller interface {
	Reenroll() (*config.Response, error)
}