tls

Aug 10, 2023

Changes in this version

+ const ErrorsNotFound

+ const RootCAKey

+ const SelfSignedAnnotation

+ func CertificateToPem(certificateDER []byte) []byte

+ func GenerateCACert(certValidityDuration time.Duration) (*KeyPair, *PemPair, error)

+ func GenerateInClusterServiceName(props CertificateProps) string

+ func GenerateRootCASecretName(props CertificateProps) string

+ func GenerateTLSPairSecretName(props CertificateProps) string

+ func IsVarmorManagerInRollingUpdate(deploy *appsv1.Deployment) bool

+ func PrivateKeyToPem(rsaKey *rsa.PrivateKey) []byte

+ func ReadRootCASecret(secretInterface corev1.SecretInterface, secretName string) (result []byte, err error)

+ type CertRenewer struct

+ func NewCertRenewer(clientConfig *rest.Config, secretInterface corev1.SecretInterface, ...) *CertRenewer

+ func (c *CertRenewer) InitTLSPemPair() (*PemPair, error)

+ func (c *CertRenewer) RollingUpdateVarmorManager() error

+ func (c *CertRenewer) ValidCert(certProps CertificateProps) (bool, error)

+ func (c *CertRenewer) WriteCACertToSecret(caPEM *PemPair, secretName string) error

+ func (c *CertRenewer) WriteTLSPairToSecret(pemPair *PemPair, secretName string) error

+ type CertificateProps struct

+ APIServerHost string

+ Namespace string

+ ServerIP string

+ Service string

+ func GetTLSCertProps(configuration *rest.Config) (certProps CertificateProps, err error)

+ type KeyPair struct

+ Cert *x509.Certificate

+ Key *rsa.PrivateKey

+ type PemPair struct

+ Certificate []byte

+ PrivateKey []byte

+ func GenerateCertPem(caCert *KeyPair, props CertificateProps, certValidityDuration time.Duration, ...) (*PemPair, error)

+ func ReadTLSPair(secretInterface corev1.SecretInterface, secretName string) (*PemPair, error)