certmanager

Documentation

Index

• Constants
• Variables
• func GetCertificateSecretName(clientName string) string
• func GetTLSEnvironmentVariables(instance *v1beta1.TemporalCluster, envPrefix, certsMountPath string) []corev1.EnvVar
• type AdminToolsFrontendClientCertificateBuilder
  • func NewAdminToolsFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *AdminToolsFrontendClientCertificateBuilder
• type GenericCAIssuerBuilder
  • func (b *GenericCAIssuerBuilder) Build() (client.Object, error)
  • func (b *GenericCAIssuerBuilder) Update(object client.Object) error
• type GenericFrontendClientCertificateBuilder
  • func NewGenericFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme, clientName string) *GenericFrontendClientCertificateBuilder
  • func (b *GenericFrontendClientCertificateBuilder) Build() (client.Object, error)
  • func (b *GenericFrontendClientCertificateBuilder) Update(object client.Object) error
• type GenericItermediateCACertificateBuilder
  • func (b *GenericItermediateCACertificateBuilder) Build() (client.Object, error)
  • func (b *GenericItermediateCACertificateBuilder) Update(object client.Object) error
• type MTLSBootstrapIssuerBuilder
  • func NewMTLSBootstrapIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSBootstrapIssuerBuilder
  • func (b *MTLSBootstrapIssuerBuilder) Build() (client.Object, error)
  • func (b *MTLSBootstrapIssuerBuilder) Update(object client.Object) error
• type MTLSFrontendCertificateBuilder
  • func NewMTLSFrontendCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSFrontendCertificateBuilder
  • func (b *MTLSFrontendCertificateBuilder) Build() (client.Object, error)
  • func (b *MTLSFrontendCertificateBuilder) Update(object client.Object) error
• type MTLSFrontendIntermediateCAIssuerBuilder
  • func NewMTLSFrontendIntermediateCAIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSFrontendIntermediateCAIssuerBuilder
• type MTLSFrontendItermediateCACertificateBuilder
  • func NewMTLSFrontendIntermediateCACertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSFrontendItermediateCACertificateBuilder
• type MTLSInternodeCertificateBuilder
  • func NewMTLSInternodeCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSInternodeCertificateBuilder
  • func (b *MTLSInternodeCertificateBuilder) Build() (client.Object, error)
  • func (b *MTLSInternodeCertificateBuilder) Update(object client.Object) error
• type MTLSInternodeIntermediateCAIssuerBuilder
  • func NewMTLSInternodeIntermediateCAIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSInternodeIntermediateCAIssuerBuilder
• type MTLSInternodeItermediateCACertificateBuilder
  • func NewMTLSInternodeIntermediateCACertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSInternodeItermediateCACertificateBuilder
• type MTLSRootCACertificateBuilder
  • func NewMTLSRootCACertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSRootCACertificateBuilder
  • func (b *MTLSRootCACertificateBuilder) Build() (client.Object, error)
  • func (b *MTLSRootCACertificateBuilder) Update(object client.Object) error
• type MTLSRootCAIssuerBuilder
  • func NewMTLSRootCAIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSRootCAIssuerBuilder
• type UIFrontendClientCertificateBuilder
  • func NewUIFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *UIFrontendClientCertificateBuilder
• type WorkerFrontendClientCertificateBuilder
  • func NewWorkerFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *WorkerFrontendClientCertificateBuilder

Constants

const (
	// InternodeCertificate is the name of the certificate used for internode communications.
	InternodeCertificate = "internode-certificate"
	// FrontendCertificate is the name of the certificate used by the frontend.
	FrontendCertificate = "frontend-certificate"
	// InternodeIntermediateCACertificate is the name of the intermediate CA certificate used to issue
	// internode certificates.
	InternodeIntermediateCACertificate = "internode-intermediate-ca-certificate"
	// FrontendIntermediateCACertificate is the name of the intermediate CA certificate used to issue
	// frontend certificates.
	FrontendIntermediateCACertificate = "frontend-intermediate-ca-certificate"
)

const (
	TLSCA   = "ca.crt"
	TLSCert = "tls.crt"
	TLSKey  = "tls.key"
)

Variables

var (
	// WorkerFrontendClientCertificate is the name of the client certificate
	// used for by the worker for authenticating against the frontend.
	WorkerFrontendClientCertificate = GetCertificateSecretName("worker")
	// AdmintoolsFrontendClientCertificate is the name of the client certificate
	// used for by admin tools for authenticating against the frontend.
	AdmintoolsFrontendClientCertificate = GetCertificateSecretName("admintools")
	// UIFrontendClientCertificate is the name of the client certificate
	// used for by UI for authenticating against the frontend.
	UIFrontendClientCertificate = GetCertificateSecretName("ui")
)

Functions

func GetCertificateSecretName

func GetCertificateSecretName(clientName string) string

GetCertificateSecretName returns generated secret name for a given client name.

func GetTLSEnvironmentVariables

func GetTLSEnvironmentVariables(instance *v1beta1.TemporalCluster, envPrefix, certsMountPath string) []corev1.EnvVar

GetTLSEnvironmentVariables returns needed env vars for enabling TLS connection for temporal tools. To support the whole range of temporal tools, the caller should provide an envPrefix which prefixes all TLS env vars.

Types

type AdminToolsFrontendClientCertificateBuilder

type AdminToolsFrontendClientCertificateBuilder struct {
	*GenericFrontendClientCertificateBuilder
}

func NewAdminToolsFrontendClientCertificateBuilder

func NewAdminToolsFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *AdminToolsFrontendClientCertificateBuilder

type GenericCAIssuerBuilder

type GenericCAIssuerBuilder struct {
	// contains filtered or unexported fields
}

func (*GenericCAIssuerBuilder) Build

func (b *GenericCAIssuerBuilder) Build() (client.Object, error)

func (*GenericCAIssuerBuilder) Update

func (b *GenericCAIssuerBuilder) Update(object client.Object) error

type GenericFrontendClientCertificateBuilder

type GenericFrontendClientCertificateBuilder struct {
	// contains filtered or unexported fields
}

func NewGenericFrontendClientCertificateBuilder

func NewGenericFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme, clientName string) *GenericFrontendClientCertificateBuilder

func (*GenericFrontendClientCertificateBuilder) Build

func (b *GenericFrontendClientCertificateBuilder) Build() (client.Object, error)

func (*GenericFrontendClientCertificateBuilder) Update

func (b *GenericFrontendClientCertificateBuilder) Update(object client.Object) error

type GenericItermediateCACertificateBuilder

type GenericItermediateCACertificateBuilder struct {
	// contains filtered or unexported fields
}

func (*GenericItermediateCACertificateBuilder) Build

func (b *GenericItermediateCACertificateBuilder) Build() (client.Object, error)

func (*GenericItermediateCACertificateBuilder) Update

func (b *GenericItermediateCACertificateBuilder) Update(object client.Object) error

type MTLSBootstrapIssuerBuilder

type MTLSBootstrapIssuerBuilder struct {
	// contains filtered or unexported fields
}

func NewMTLSBootstrapIssuerBuilder

func NewMTLSBootstrapIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSBootstrapIssuerBuilder

func (*MTLSBootstrapIssuerBuilder) Build

func (b *MTLSBootstrapIssuerBuilder) Build() (client.Object, error)

func (*MTLSBootstrapIssuerBuilder) Update

func (b *MTLSBootstrapIssuerBuilder) Update(object client.Object) error

type MTLSFrontendCertificateBuilder

type MTLSFrontendCertificateBuilder struct {
	// contains filtered or unexported fields
}

func NewMTLSFrontendCertificateBuilder

func NewMTLSFrontendCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSFrontendCertificateBuilder

func (*MTLSFrontendCertificateBuilder) Build

func (b *MTLSFrontendCertificateBuilder) Build() (client.Object, error)

func (*MTLSFrontendCertificateBuilder) Update

func (b *MTLSFrontendCertificateBuilder) Update(object client.Object) error

type MTLSFrontendIntermediateCAIssuerBuilder

type MTLSFrontendIntermediateCAIssuerBuilder struct {
	GenericCAIssuerBuilder
}

func NewMTLSFrontendIntermediateCAIssuerBuilder

func NewMTLSFrontendIntermediateCAIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSFrontendIntermediateCAIssuerBuilder

type MTLSFrontendItermediateCACertificateBuilder

type MTLSFrontendItermediateCACertificateBuilder struct {
	GenericItermediateCACertificateBuilder
}

func NewMTLSFrontendIntermediateCACertificateBuilder

func NewMTLSFrontendIntermediateCACertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSFrontendItermediateCACertificateBuilder

type MTLSInternodeCertificateBuilder

type MTLSInternodeCertificateBuilder struct {
	// contains filtered or unexported fields
}

func NewMTLSInternodeCertificateBuilder

func NewMTLSInternodeCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSInternodeCertificateBuilder

func (*MTLSInternodeCertificateBuilder) Build

func (b *MTLSInternodeCertificateBuilder) Build() (client.Object, error)

func (*MTLSInternodeCertificateBuilder) Update

func (b *MTLSInternodeCertificateBuilder) Update(object client.Object) error

type MTLSInternodeIntermediateCAIssuerBuilder

type MTLSInternodeIntermediateCAIssuerBuilder struct {
	GenericCAIssuerBuilder
}

func NewMTLSInternodeIntermediateCAIssuerBuilder

func NewMTLSInternodeIntermediateCAIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSInternodeIntermediateCAIssuerBuilder

type MTLSInternodeItermediateCACertificateBuilder

type MTLSInternodeItermediateCACertificateBuilder struct {
	GenericItermediateCACertificateBuilder
}

func NewMTLSInternodeIntermediateCACertificateBuilder

func NewMTLSInternodeIntermediateCACertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSInternodeItermediateCACertificateBuilder

type MTLSRootCACertificateBuilder

type MTLSRootCACertificateBuilder struct {
	// contains filtered or unexported fields
}

func NewMTLSRootCACertificateBuilder

func NewMTLSRootCACertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSRootCACertificateBuilder

func (*MTLSRootCACertificateBuilder) Build

func (b *MTLSRootCACertificateBuilder) Build() (client.Object, error)

func (*MTLSRootCACertificateBuilder) Update

func (b *MTLSRootCACertificateBuilder) Update(object client.Object) error

type MTLSRootCAIssuerBuilder

type MTLSRootCAIssuerBuilder struct {
	GenericCAIssuerBuilder
}

func NewMTLSRootCAIssuerBuilder

func NewMTLSRootCAIssuerBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *MTLSRootCAIssuerBuilder

type UIFrontendClientCertificateBuilder

type UIFrontendClientCertificateBuilder struct {
	*GenericFrontendClientCertificateBuilder
}

func NewUIFrontendClientCertificateBuilder

func NewUIFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *UIFrontendClientCertificateBuilder

type WorkerFrontendClientCertificateBuilder

type WorkerFrontendClientCertificateBuilder struct {
	*GenericFrontendClientCertificateBuilder
}

func NewWorkerFrontendClientCertificateBuilder

func NewWorkerFrontendClientCertificateBuilder(instance *v1beta1.TemporalCluster, scheme *runtime.Scheme) *WorkerFrontendClientCertificateBuilder