ca

Documentation

Index

• type Cert
• type KeyPair
• type Manager
• type Managers

Types

type Cert

type Cert = []byte

type KeyPair

type KeyPair = tls.KeyPair

type Manager

type Manager interface {
	// ValidateBackend validates that backend configuration is correct
	ValidateBackend(ctx context.Context, mesh string, backend *mesh_proto.CertificateAuthorityBackend) error
	// EnsureBackends ensures the given CA backends managed by this manager are available
	EnsureBackends(ctx context.Context, mesh string, backends []*mesh_proto.CertificateAuthorityBackend) error
	// UsedSecrets returns a list of secrets that are used by the manager
	UsedSecrets(mesh string, backend *mesh_proto.CertificateAuthorityBackend) ([]string, error)

	// GetRootCert returns root certificates of the CA
	GetRootCert(ctx context.Context, mesh string, backend *mesh_proto.CertificateAuthorityBackend) ([]Cert, error)
	// GenerateDataplaneCert generates cert for a dataplane with service tags
	GenerateDataplaneCert(ctx context.Context, mesh string, backend *mesh_proto.CertificateAuthorityBackend, tags mesh_proto.MultiValueTagSet) (KeyPair, error)
}

Manager manages CAs by creating CAs and generating certificate. It is created per CA type and then may be used for different CA instances of the same type

type Managers

type Managers = map[string]Manager

Managers hold Manager instance for each type of backend available (by default: builtin, provided)