Documentation ¶
Index ¶
Constants ¶
const GroupName = "certificates.k8s.io"
GroupName is the group name use in this package
Variables ¶
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type CertificateSigningRequest ¶
type CertificateSigningRequest struct { // APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources APIVersion string `json:"apiVersion,omitempty"` // Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds Kind string `json:"kind,omitempty"` // metadata Metadata *apimachinery_pkg_apis_meta_v1.ObjectMeta `json:"metadata,omitempty"` // The certificate request itself and any additional information. Spec *CertificateSigningRequestSpec `json:"spec,omitempty"` // Derived information about the request. Status *CertificateSigningRequestStatus `json:"status,omitempty"` }
CertificateSigningRequest Describes a certificate signing request
swagger:model CertificateSigningRequest
func (*CertificateSigningRequest) GroupVersionKind ¶
func (v *CertificateSigningRequest) GroupVersionKind() schema.GroupVersionKind
type CertificateSigningRequestCondition ¶
type CertificateSigningRequestCondition struct { // lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time. LastTransitionTime *apimachinery_pkg_apis_meta_v1.Time `json:"lastTransitionTime,omitempty"` // timestamp for the last update to this condition LastUpdateTime *apimachinery_pkg_apis_meta_v1.Time `json:"lastUpdateTime,omitempty"` // human readable message with details about the request state Message string `json:"message,omitempty"` // brief reason for the request state Reason string `json:"reason,omitempty"` // Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown". Defaults to "True". If unset, should be treated as "True". Status string `json:"status,omitempty"` // type of the condition. Known conditions include "Approved", "Denied", and "Failed". // Required: true Type *string `json:"type"` }
CertificateSigningRequestCondition certificate signing request condition
swagger:model CertificateSigningRequestCondition
type CertificateSigningRequestList ¶
type CertificateSigningRequestList struct { // APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources APIVersion string `json:"apiVersion,omitempty"` // items // Required: true Items []*CertificateSigningRequest `json:"items"` // Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds Kind string `json:"kind,omitempty"` // metadata Metadata *apimachinery_pkg_apis_meta_v1.ListMeta `json:"metadata,omitempty"` }
CertificateSigningRequestList certificate signing request list
swagger:model CertificateSigningRequestList
func (*CertificateSigningRequestList) GroupVersionKind ¶
func (v *CertificateSigningRequestList) GroupVersionKind() schema.GroupVersionKind
type CertificateSigningRequestSpec ¶
type CertificateSigningRequestSpec struct { // Extra information about the requesting user. See user.Info interface for details. Extra map[string][]string `json:"extra,omitempty"` // Group information about the requesting user. See user.Info interface for details. Groups []string `json:"groups,omitempty"` // Base64-encoded PKCS#10 CSR data // Required: true // Format: byte Request *strfmt.Base64 `json:"request"` // Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted: // 1. If it's a kubelet client certificate, it is assigned // "kubernetes.io/kube-apiserver-client-kubelet". // 2. If it's a kubelet serving certificate, it is assigned // "kubernetes.io/kubelet-serving". // 3. Otherwise, it is assigned "kubernetes.io/legacy-unknown". // Distribution of trust for signers happens out of band. You can select on this field using `spec.signerName`. SignerName string `json:"signerName,omitempty"` // UID information about the requesting user. See user.Info interface for details. UID string `json:"uid,omitempty"` // allowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 // https://tools.ietf.org/html/rfc5280#section-4.2.1.12 // Valid values are: // "signing", // "digital signature", // "content commitment", // "key encipherment", // "key agreement", // "data encipherment", // "cert sign", // "crl sign", // "encipher only", // "decipher only", // "any", // "server auth", // "client auth", // "code signing", // "email protection", // "s/mime", // "ipsec end system", // "ipsec tunnel", // "ipsec user", // "timestamping", // "ocsp signing", // "microsoft sgc", // "netscape sgc" Usages []string `json:"usages,omitempty"` // Information about the requesting user. See user.Info interface for details. Username string `json:"username,omitempty"` }
CertificateSigningRequestSpec This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.
swagger:model CertificateSigningRequestSpec
type CertificateSigningRequestStatus ¶
type CertificateSigningRequestStatus struct { // If request was approved, the controller will place the issued certificate here. // Format: byte Certificate strfmt.Base64 `json:"certificate,omitempty"` // Conditions applied to the request, such as approval or denial. Conditions []*CertificateSigningRequestCondition `json:"conditions,omitempty"` }
CertificateSigningRequestStatus certificate signing request status
swagger:model CertificateSigningRequestStatus