csr

Documentation

Index

• func RequestCertificate(client certificatesclient.CertificateSigningRequestInterface, csrData []byte, ...) (certData []byte, err error)
• func RequestNodeCertificate(client certificatesclient.CertificateSigningRequestInterface, ...) (certData []byte, err error)

Functions

func RequestCertificate

func RequestCertificate(client certificatesclient.CertificateSigningRequestInterface, csrData []byte, usages []certificates.KeyUsage) (certData []byte, err error)

RequestCertificate will create a certificate signing request using the PEM encoded CSR and send it to API server, then it will watch the object's status, once approved by API server, it will return the API server's issued certificate (pem-encoded). If there is any errors, or the watch timeouts, it will return an error.

func RequestNodeCertificate

func RequestNodeCertificate(client certificatesclient.CertificateSigningRequestInterface, privateKeyData []byte, nodeName types.NodeName) (certData []byte, err error)

RequestNodeCertificate will create a certificate signing request for a node (Organization and CommonName for the CSR will be set as expected for node certificates) and send it to API server, then it will watch the object's status, once approved by API server, it will return the API server's issued certificate (pem-encoded). If there is any errors, or the watch timeouts, it will return an error. This is intended for use on nodes (kubelet and kubeadm).