ca

Documentation

Index

• func NewCA(ctx *controller.Context, issuer v1alpha1.GenericIssuer) (issuer.Interface, error)
• type CA
  • func (c *CA) Issue(ctx context.Context, crt *v1alpha1.Certificate) ([]byte, []byte, error)
  • func (c *CA) Prepare(ctx context.Context, crt *v1alpha1.Certificate) error
  • func (c *CA) Renew(ctx context.Context, crt *v1alpha1.Certificate) ([]byte, []byte, error)
  • func (c *CA) Setup(ctx context.Context) error

Functions

func NewCA

func NewCA(ctx *controller.Context, issuer v1alpha1.GenericIssuer) (issuer.Interface, error)

Types

type CA

type CA struct {
	*controller.Context
	// contains filtered or unexported fields
}

CA is a simple CA implementation backed by the Kubernetes API server. A secret resource is used to store a CA public and private key that is then used to sign certificates.

func (*CA) Issue

func (c *CA) Issue(ctx context.Context, crt *v1alpha1.Certificate) ([]byte, []byte, error)

func (*CA) Prepare

func (c *CA) Prepare(ctx context.Context, crt *v1alpha1.Certificate) error

Prepare does nothing for the CA issuer. In future, this may validate the certificate request against the issuer, or set fields in the Status block to be consumed in Issue and Renew

func (*CA) Renew

func (c *CA) Renew(ctx context.Context, crt *v1alpha1.Certificate) ([]byte, []byte, error)

func (*CA) Setup

func (c *CA) Setup(ctx context.Context) error