csr

Documentation

Index

• Constants
• Variables
• type ApprovalManager
  • func NewApprovalManager(log logrus.FieldLogger, clientset kubernetes.Interface) *ApprovalManager
  • func (h *ApprovalManager) Start(ctx context.Context) error
  • func (h *ApprovalManager) Stop()
• type Certificate
  • func GetCertificateByNodeName(ctx context.Context, client kubernetes.Interface, nodeName string) (*Certificate, error)
  • func (c *Certificate) ApproveCSRCertificate(ctx context.Context, client kubernetes.Interface) (*Certificate, error)
  • func (c *Certificate) Approved() bool
  • func (c *Certificate) DeleteCSR(ctx context.Context, client kubernetes.Interface) error
  • func (c *Certificate) ForCASTAINode() bool
  • func (c *Certificate) NewCSR(ctx context.Context, client kubernetes.Interface) (*Certificate, error)
  • func (c *Certificate) NodeBootstrap() bool
  • func (c *Certificate) Outdated() bool
  • func (c *Certificate) Validate() error

Constants

const (
	ReasonApproved = "AutoApproved"
)

Variables

var ErrNodeCertificateNotFound = errors.New("node certificate not found")

Types

type ApprovalManager

type ApprovalManager struct {
	// contains filtered or unexported fields
}

func NewApprovalManager

func NewApprovalManager(log logrus.FieldLogger, clientset kubernetes.Interface) *ApprovalManager

func (*ApprovalManager) Start

func (h *ApprovalManager) Start(ctx context.Context) error

func (*ApprovalManager) Stop

func (h *ApprovalManager) Stop()

type Certificate

type Certificate struct {
	Name           string
	RequestingUser string
	// contains filtered or unexported fields
}

Certificate wraps v1 and v1beta1 csr.

func GetCertificateByNodeName

func GetCertificateByNodeName(ctx context.Context, client kubernetes.Interface, nodeName string) (*Certificate, error)

GetCertificateByNodeName lists all csr objects and parses request pem encoded cert to find it by node name.

func (*Certificate) ApproveCSRCertificate

func (c *Certificate) ApproveCSRCertificate(ctx context.Context, client kubernetes.Interface) (*Certificate, error)

ApproveCSRCertificate approves csr.

func (*Certificate) Approved

func (c *Certificate) Approved() bool

func (*Certificate) DeleteCSR

func (c *Certificate) DeleteCSR(ctx context.Context, client kubernetes.Interface) error

DeleteCSR deletes csr.

func (*Certificate) ForCASTAINode

func (c *Certificate) ForCASTAINode() bool

func (*Certificate) NewCSR

func (c *Certificate) NewCSR(ctx context.Context, client kubernetes.Interface) (*Certificate, error)

NewCSR creates new csr.

func (*Certificate) NodeBootstrap

func (c *Certificate) NodeBootstrap() bool

func (*Certificate) Outdated

func (c *Certificate) Outdated() bool

Outdated returns, whether the certificate request is old and should not be processed by cluster-controller. It has nothing to do with certificate expiration.

func (*Certificate) Validate

func (c *Certificate) Validate() error