certmanager

Documentation

Index

• Constants
• func NewRootCA(client *Client, cn string, validityPeriod time.Duration, ...) (*certificate.Certificate, error)
• type CertManager
  • func NewManager(ca *certificate.Certificate, client *Client) (*CertManager, error)
  • func (m CertManager) GetCertificate(cn string) (*certificate.Certificate, error)
  • func (m CertManager) GetRootCertificate() (*certificate.Certificate, error)
  • func (m CertManager) IssueCertificate(cn string, validityPeriod time.Duration, dnsNames []string) (*certificate.Certificate, error)
• type Client
  • func NewClient(k8sApi *kube.K8sAPI, mc *config.MeshConfig) *Client

Constants

const (
	CAIssuerName          = "flomesh.io"
	SelfSignedIssuerName  = "self-signed.flomesh.io"
	IssuerKind            = "Issuer"
	IssuerGroup           = "cert-manager.io"
	CertManagerRootCAName = "flomesh-root-ca"

	DefaultPollInterval = 1 * time.Second
	DefaultPollTimeout  = 60 * time.Second
)

Functions

func NewRootCA

func NewRootCA(
	client *Client,
	cn string, validityPeriod time.Duration,
	country, locality, organization string,
) (*certificate.Certificate, error)

Types

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

func NewManager

func NewManager(ca *certificate.Certificate, client *Client) (*CertManager, error)

func (CertManager) GetCertificate

func (m CertManager) GetCertificate(cn string) (*certificate.Certificate, error)

func (CertManager) GetRootCertificate

func (m CertManager) GetRootCertificate() (*certificate.Certificate, error)

func (CertManager) IssueCertificate

func (m CertManager) IssueCertificate(cn string, validityPeriod time.Duration, dnsNames []string) (*certificate.Certificate, error)

type Client

type Client struct {
	// contains filtered or unexported fields
}

func NewClient

func NewClient(k8sApi *kube.K8sAPI, mc *config.MeshConfig) *Client