certcache

Documentation

Overview

Package certcache implements an in-cluster SEV-SNP certificate cache.

Index

• type CachedCerts
  • func (c *CachedCerts) SevSnpCerts() (ask, ark *x509.Certificate)
• type Client
  • func NewClient(log *slog.Logger, kubeClient kubeClient, attVariant variant.Variant) *Client
  • func (c *Client) CreateCertChainCache(ctx context.Context) (*CachedCerts, error)

Types

type CachedCerts

type CachedCerts struct {
	// contains filtered or unexported fields
}

CachedCerts contains the cached certificates.

func (*CachedCerts) SevSnpCerts

func (c *CachedCerts) SevSnpCerts() (ask, ark *x509.Certificate)

SevSnpCerts returns the cached SEV-SNP ASK and ARK certificates.

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client is a client for interacting with the certificate chain cache.

func NewClient

func NewClient(log *slog.Logger, kubeClient kubeClient, attVariant variant.Variant) *Client

NewClient creates a new CertCacheClient.

func (*Client) CreateCertChainCache

func (c *Client) CreateCertChainCache(ctx context.Context) (*CachedCerts, error)

CreateCertChainCache creates a certificate chain cache for the given attestation variant and returns the cached certificates, if applicable. If the certificate chain cache already exists, nothing is done.