networking

Documentation

Index

• Variables
• func IsNetworkPluginClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool
• func ValidateNetworkPluginClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error

Variables

var (
	NetworkPluginRecognizer = generic.NewCertificateSigningRequestRecognizer(
		IsNetworkPluginClientCert,
		authv1.ResourceAttributes{
			Group:       certificatesv1.GroupName,
			Resource:    "certificatesigningrequests",
			Verb:        "create",
			Subresource: "networkpluginclient",
		},
		"Auto approving network plugin client certificate after SubjectAccessReview.",
	)
)

var (
	NetworkPluginRequiredUsages = sets.New[certificatesv1.KeyUsage](
		certificatesv1.UsageDigitalSignature,
		certificatesv1.UsageKeyEncipherment,
		certificatesv1.UsageClientAuth,
	)
)

var Recognizers []generic.CertificateSigningRequestRecognizer

Functions

func IsNetworkPluginClientCert

func IsNetworkPluginClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool

func ValidateNetworkPluginClientCSR

func ValidateNetworkPluginClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error