compute

Documentation

Index

• Variables
• func IsMachinePoolClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool
• func ValidateMachinePoolClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error

Variables

var (
	MachinePoolRecognizer = generic.NewCertificateSigningRequestRecognizer(
		IsMachinePoolClientCert,
		authv1.ResourceAttributes{
			Group:       certificatesv1.GroupName,
			Resource:    "certificatesigningrequests",
			Verb:        "create",
			Subresource: "machinepoolclient",
		},
		"Auto approving machine pool client certificate after SubjectAccessReview.",
	)
)

var (
	MachinePoolRequiredUsages = sets.New[certificatesv1.KeyUsage](
		certificatesv1.UsageDigitalSignature,
		certificatesv1.UsageKeyEncipherment,
		certificatesv1.UsageClientAuth,
	)
)

var Recognizers []generic.CertificateSigningRequestRecognizer

Functions

func IsMachinePoolClientCert

func IsMachinePoolClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool

func ValidateMachinePoolClientCSR

func ValidateMachinePoolClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error