bootstrap

Documentation

Index

• func CreateBootstrapCertWithIssue(client *api.Client, pkiMount, pkiRole, pkiTTL, nodeName string) (key, cert, ca []byte, err error)
• func CreateBootstrapCertWithSignVerbatim(client *api.Client, pkiMount, pkiRole, pkiTTL, nodeName, group string) (key, cert, ca []byte, err error)

Functions

func CreateBootstrapCertWithIssue

func CreateBootstrapCertWithIssue(client *api.Client, pkiMount, pkiRole, pkiTTL, nodeName string) (key, cert, ca []byte, err error)

CreateBootstrapCertWithIssue issues a bootstrap certificate using Vault to issue the certificate and private key This removes control over group name, but is more secure

func CreateBootstrapCertWithSignVerbatim

func CreateBootstrapCertWithSignVerbatim(client *api.Client, pkiMount, pkiRole, pkiTTL, nodeName, group string) (key, cert, ca []byte, err error)

CreateBootstrapCertWithSignVerbatim issues a bootstrap certificate using Vault to sign a CSR verbatim. This gives control over the group name, but at the cost that the application technically has permission to issue any certificate.