v1beta1

Documentation

Index

• Constants
• Variables
• func Resource(resource string) schema.GroupResource
• type CertificateSigningRequest
  • func (v *CertificateSigningRequest) GroupVersionKind() schema.GroupVersionKind
• type CertificateSigningRequestCondition
• type CertificateSigningRequestList
  • func (v *CertificateSigningRequestList) GroupVersionKind() schema.GroupVersionKind
• type CertificateSigningRequestSpec
• type CertificateSigningRequestStatus

Constants

const GroupName = "certificates.k8s.io"

GroupName is the group name use in this package

Variables

var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Resource

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type CertificateSigningRequest

type CertificateSigningRequest struct {

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	APIVersion string `json:"apiVersion,omitempty"`

	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind string `json:"kind,omitempty"`

	// metadata
	Metadata *apimachinery_pkg_apis_meta_v1.ObjectMeta `json:"metadata,omitempty"`

	// The certificate request itself and any additional information.
	Spec *CertificateSigningRequestSpec `json:"spec,omitempty"`

	// Derived information about the request.
	Status *CertificateSigningRequestStatus `json:"status,omitempty"`
}

CertificateSigningRequest Describes a certificate signing request

swagger:model CertificateSigningRequest

func (*CertificateSigningRequest) GroupVersionKind

func (v *CertificateSigningRequest) GroupVersionKind() schema.GroupVersionKind

type CertificateSigningRequestCondition

type CertificateSigningRequestCondition struct {

	// lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
	LastTransitionTime *apimachinery_pkg_apis_meta_v1.Time `json:"lastTransitionTime,omitempty"`

	// timestamp for the last update to this condition
	LastUpdateTime *apimachinery_pkg_apis_meta_v1.Time `json:"lastUpdateTime,omitempty"`

	// human readable message with details about the request state
	Message string `json:"message,omitempty"`

	// brief reason for the request state
	Reason string `json:"reason,omitempty"`

	// Status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown". Defaults to "True". If unset, should be treated as "True".
	Status string `json:"status,omitempty"`

	// type of the condition. Known conditions include "Approved", "Denied", and "Failed".
	// Required: true
	Type *string `json:"type"`
}

CertificateSigningRequestCondition certificate signing request condition

swagger:model CertificateSigningRequestCondition

type CertificateSigningRequestList

type CertificateSigningRequestList struct {

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	APIVersion string `json:"apiVersion,omitempty"`

	// items
	// Required: true
	Items []*CertificateSigningRequest `json:"items"`

	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind string `json:"kind,omitempty"`

	// metadata
	Metadata *apimachinery_pkg_apis_meta_v1.ListMeta `json:"metadata,omitempty"`
}

CertificateSigningRequestList certificate signing request list

swagger:model CertificateSigningRequestList

func (*CertificateSigningRequestList) GroupVersionKind

func (v *CertificateSigningRequestList) GroupVersionKind() schema.GroupVersionKind

type CertificateSigningRequestSpec

type CertificateSigningRequestSpec struct {

	// Extra information about the requesting user. See user.Info interface for details.
	Extra map[string][]string `json:"extra,omitempty"`

	// Group information about the requesting user. See user.Info interface for details.
	Groups []string `json:"groups,omitempty"`

	// Base64-encoded PKCS#10 CSR data
	// Required: true
	// Format: byte
	Request *strfmt.Base64 `json:"request"`

	// Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:
	//  1. If it's a kubelet client certificate, it is assigned
	//     "kubernetes.io/kube-apiserver-client-kubelet".
	//  2. If it's a kubelet serving certificate, it is assigned
	//     "kubernetes.io/kubelet-serving".
	//  3. Otherwise, it is assigned "kubernetes.io/legacy-unknown".
	// Distribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.
	SignerName string `json:"signerName,omitempty"`

	// UID information about the requesting user. See user.Info interface for details.
	UID string `json:"uid,omitempty"`

	// allowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3
	//      https://tools.ietf.org/html/rfc5280#section-4.2.1.12
	// Valid values are:
	//  "signing",
	//  "digital signature",
	//  "content commitment",
	//  "key encipherment",
	//  "key agreement",
	//  "data encipherment",
	//  "cert sign",
	//  "crl sign",
	//  "encipher only",
	//  "decipher only",
	//  "any",
	//  "server auth",
	//  "client auth",
	//  "code signing",
	//  "email protection",
	//  "s/mime",
	//  "ipsec end system",
	//  "ipsec tunnel",
	//  "ipsec user",
	//  "timestamping",
	//  "ocsp signing",
	//  "microsoft sgc",
	//  "netscape sgc"
	Usages []string `json:"usages,omitempty"`

	// Information about the requesting user. See user.Info interface for details.
	Username string `json:"username,omitempty"`
}

CertificateSigningRequestSpec This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.

swagger:model CertificateSigningRequestSpec

type CertificateSigningRequestStatus

type CertificateSigningRequestStatus struct {

	// If request was approved, the controller will place the issued certificate here.
	// Format: byte
	Certificate strfmt.Base64 `json:"certificate,omitempty"`

	// Conditions applied to the request, such as approval or denial.
	Conditions []*CertificateSigningRequestCondition `json:"conditions,omitempty"`
}

CertificateSigningRequestStatus certificate signing request status

swagger:model CertificateSigningRequestStatus