Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

cert

package

Go to main page

Versions in this module

v3

v3.3.8

May 6, 2020

v3.3.7

May 6, 2020

v3.3.6

May 6, 2020

Changes in this version

+ const APIserverCert

+ const APIserverEtcdClientCert

+ const APIserverKubeletClientCert

+ const CertificateBlockType

+ const EtcdHealthcheckClientCert

+ const EtcdPeerCert

+ const EtcdServerCert

+ const FrontProxyClientCert

+ const PrivateKeyBlockType

+ const PublicKeyBlockType

+ const RSAPrivateKeyBlockType

+ var KubeDefaultCertPath = "/etc/kubernetes/pki"

+ var KubernetesDir = "/etc/kubernetes"

+ var SealosConfigDir = "/root/.sealos"

+ func CertCMD(altNames []string, hostIP, hostName, serviceCIRD, DNSDomain string) string

+ func CreateBasic(serverURL, clusterName, userName string, caCert []byte) *clientcmdapi.Config

+ func CreateJoinControlPlaneKubeConfigFiles(outDir string, cfg Config, nodeName, controlPlaneEndpoint, clusterName string) error

+ func CreateKubeConfigFile(kubeConfigFileName string, outDir string, cfg Config, ...) error

+ func CreateWithCerts(serverURL, clusterName, userName string, caCert []byte, clientKey []byte, ...) *clientcmdapi.Config

+ func CreateWithToken(serverURL, clusterName, userName string, caCert []byte, token string) *clientcmdapi.Config

+ func EncodeCertPEM(cert *x509.Certificate) []byte

+ func EncodePublicKeyPEM(key crypto.PublicKey) ([]byte, error)

+ func GenerateCert(certPATH, certEtcdPATH string, altNames []string, ...)

+ func LoadCaCertAndKeyFromDisk(cfg Config) (*x509.Certificate, crypto.Signer, error)

+ func NewCaCertAndKey(cfg Config) (*x509.Certificate, crypto.Signer, error)

+ func NewCaCertAndKeyFromRoot(cfg Config, caCert *x509.Certificate, caKey crypto.Signer) (*x509.Certificate, crypto.Signer, error)

+ func NewPrivateKey(keyType x509.PublicKeyAlgorithm) (crypto.Signer, error)

+ func NewSelfSignedCACert(key crypto.Signer, commonName string, organization []string, ...) (*x509.Certificate, error)

+ func NewSignedCert(cfg Config, key crypto.Signer, caCert *x509.Certificate, caKey crypto.Signer) (*x509.Certificate, error)

+ func TryLoadKeyFromDisk(pkiPath string) (crypto.Signer, error)

+ func ValidateKubeconfigsForExternalCA(outDir string, cfg Config, controlPlaneEndpoint string) error

+ func WriteCert(pkiPath, name string, cert *x509.Certificate) error

+ func WriteCertAndKey(pkiPath string, name string, cert *x509.Certificate, key crypto.Signer) error

+ func WriteKey(pkiPath, name string, key crypto.Signer) error

+ func WriteKubeConfigWithClientCert(out io.Writer, cfg Config, ...) error

+ func WriteKubeConfigWithToken(out io.Writer, cfg Config, ...) error

+ func WritePublicKey(pkiPath, name string, key crypto.PublicKey) error

+ func WriteToDisk(filename string, kubeconfig *clientcmdapi.Config) error

+ type AltNames struct

+ DNSNames map[string]string

+ IPs map[string]net.IP

+ type Config struct

+ AltNames AltNames

+ BaseName string

+ CAName string

+ CommonName string

+ DefaultPath string

+ Organization []string

+ Path string

+ Usages []x509.ExtKeyUsage

+ Year time.Duration

+ func CaList(CertPath, CertEtcdPath string) []Config

+ func CertList(CertPath, CertEtcdPath string) []Config

+ type SealosCertMetaData struct

+ APIServer AltNames

+ CertEtcdPath string

+ CertPath string

+ DNSDomain string

+ NodeIP string

+ NodeName string

+ func NewSealosCertMetaData(certPATH, certEtcdPATH string, apiServerIPAndDomains []string, ...) (*SealosCertMetaData, error)

+ func (meta *SealosCertMetaData) GenerateAll() error