util

Documentation

Index

• Constants
• Variables
• func CertificateHasCondition(crt *cmapi.Certificate, c cmapi.CertificateCondition) bool
• func CertificateRequestHasCondition(cr *cmapi.CertificateRequest, c cmapi.CertificateRequestCondition) bool
• func CertificateRequestReadyReason(cr *cmapi.CertificateRequest) string
• func DefaultCertDuration(d *metav1.Duration) time.Duration
• func IssuerHasCondition(i cmapi.GenericIssuer, c cmapi.IssuerCondition) bool
• func IssuerKind(ref cmapi.ObjectReference) string
• func NameForIssuer(i cmapi.GenericIssuer) (string, error)
• func SetCertificateCondition(crt *cmapi.Certificate, conditionType cmapi.CertificateConditionType, ...)
• func SetCertificateRequestCondition(cr *cmapi.CertificateRequest, ...)
• func SetIssuerCondition(i cmapi.GenericIssuer, conditionType cmapi.IssuerConditionType, ...)

Constants

const (
	// IssuerACME is the name of the ACME issuer
	IssuerACME string = "acme"
	// IssuerCA is the name of the simple issuer
	IssuerCA string = "ca"
	// IssuerVault is the name of the Vault issuer
	IssuerVault string = "vault"
	// IssuerSelfSigned is a self signing issuer
	IssuerSelfSigned string = "selfsigned"
	// IssuerVenafi uses Venafi Trust Protection Platform and Venafi Cloud
	IssuerVenafi string = "venafi"
)

Variables

var Clock clock.Clock = clock.RealClock{}

Clock is defined as a package var so it can be stubbed out during tests.

Functions

func CertificateHasCondition

func CertificateHasCondition(crt *cmapi.Certificate, c cmapi.CertificateCondition) bool

CertificateHasCondition will return true if the given Certificate has a condition matching the provided CertificateCondition. Only the Type and Status field will be used in the comparison, meaning that this function will return 'true' even if the Reason, Message and LastTransitionTime fields do not match.

func CertificateRequestHasCondition

func CertificateRequestHasCondition(cr *cmapi.CertificateRequest, c cmapi.CertificateRequestCondition) bool

CertificateRequestHasCondition will return true if the given CertificateRequest has a condition matching the provided CertificateRequestCondition. Only the Type and Status field will be used in the comparison, meaning that this function will return 'true' even if the Reason, Message and LastTransitionTime fields do not match.

func CertificateRequestReadyReason

func CertificateRequestReadyReason(cr *cmapi.CertificateRequest) string

This returns the status reason of a CertificateRequest. The order of reason hierarchy is 'Failed' -> 'Ready' -> 'Pending' -> ”

func DefaultCertDuration

func DefaultCertDuration(d *metav1.Duration) time.Duration

func IssuerHasCondition

func IssuerHasCondition(i cmapi.GenericIssuer, c cmapi.IssuerCondition) bool

IssuerHasCondition will return true if the given GenericIssuer has a condition matching the provided IssuerCondition. Only the Type and Status field will be used in the comparison, meaning that this function will return 'true' even if the Reason, Message and LastTransitionTime fields do not match.

func IssuerKind

func IssuerKind(ref cmapi.ObjectReference) string

issuerKind returns the kind of issuer for a certificate

func NameForIssuer

func NameForIssuer(i cmapi.GenericIssuer) (string, error)

NameForIssuer determines the name of the Issuer implementation given an Issuer resource.

func SetCertificateCondition

func SetCertificateCondition(crt *cmapi.Certificate, conditionType cmapi.CertificateConditionType, status cmapi.ConditionStatus, reason, message string)

SetCertificateCondition will set a 'condition' on the given Certificate.

• If no condition of the same type already exists, the condition will be inserted with the LastTransitionTime set to the current time.
• If a condition of the same type and state already exists, the condition will be updated but the LastTransitionTime will not be modified.
• If a condition of the same type and different state already exists, the condition will be updated and the LastTransitionTime set to the current time.

func SetCertificateRequestCondition

func SetCertificateRequestCondition(cr *cmapi.CertificateRequest, conditionType cmapi.CertificateRequestConditionType, status cmapi.ConditionStatus, reason, message string)

SetCertificateRequestCondition will set a 'condition' on the given CertificateRequest.

• If no condition of the same type already exists, the condition will be inserted with the LastTransitionTime set to the current time.
• If a condition of the same type and state already exists, the condition will be updated but the LastTransitionTime will not be modified.
• If a condition of the same type and different state already exists, the condition will be updated and the LastTransitionTime set to the current time.

func SetIssuerCondition

func SetIssuerCondition(i cmapi.GenericIssuer, conditionType cmapi.IssuerConditionType, status cmapi.ConditionStatus, reason, message string)

SetIssuerCondition will set a 'condition' on the given GenericIssuer.

• If no condition of the same type already exists, the condition will be inserted with the LastTransitionTime set to the current time.
• If a condition of the same type and state already exists, the condition will be updated but the LastTransitionTime will not be modified.
• If a condition of the same type and different state already exists, the condition will be updated and the LastTransitionTime set to the current time.

This function works with both Issuer and ClusterIssuer resources.