venafi

Documentation

Index

• func NewVenafi(ctx *controller.Context, issuer cmapi.GenericIssuer) (issuer.Interface, error)
• type Venafi
  • func (v *Venafi) Issue(ctx context.Context, crt *v1alpha1.Certificate) (*issuer.IssueResponse, error)
  • func (v *Venafi) Setup(ctx context.Context) error
  • func (v *Venafi) Sign(ctx context.Context, cr *v1alpha1.CertificateRequest) (*issuer.IssueResponse, error)

Functions

func NewVenafi

func NewVenafi(ctx *controller.Context, issuer cmapi.GenericIssuer) (issuer.Interface, error)

Types

type Venafi

type Venafi struct {
	*controller.Context
	// contains filtered or unexported fields
}

Venafi is a implementation of govcert library to manager certificates from TPP or Venafi Cloud

func (*Venafi) Issue

func (v *Venafi) Issue(ctx context.Context, crt *v1alpha1.Certificate) (*issuer.IssueResponse, error)

Issue will attempt to issue a new certificate from the Venafi Issuer. The control flow is as follows: - Attempt to retrieve the existing private key

• If it does not exist, generate one

- Generate a certificate template - Read the zone configuration from the Venafi server - Create a Venafi request based on the certificate template - Set defaults on the request based on the zone - Validate the request against the zone - Submit the request - Wait for the request to be fulfilled and the certificate to be available

func (*Venafi) Setup

func (v *Venafi) Setup(ctx context.Context) error

func (*Venafi) Sign

func (v *Venafi) Sign(ctx context.Context, cr *v1alpha1.CertificateRequest) (*issuer.IssueResponse, error)