tls

Documentation

Index

• Constants
• Variables
• func GenerateRootCASecretName() string
• func GenerateTLSPairSecretName() string
• func NewCertRenewer(client controllerutils.ObjectClient[*corev1.Secret], ...) *certRenewer
• func ReadRootCASecret(client corev1listers.SecretNamespaceLister) ([]byte, error)
• type CertRenewer
• type CertValidator

Constants

const (
	// CertRenewalInterval is the renewal interval for rootCA
	CertRenewalInterval = 12 * time.Hour
	// CAValidityDuration is the valid duration for CA certificates
	CAValidityDuration = 365 * 24 * time.Hour
	// TLSValidityDuration is the valid duration for TLS certificates
	TLSValidityDuration = 150 * 24 * time.Hour
)

Variables

var ErrorsNotFound = "root CA certificate not found"

Functions

func GenerateRootCASecretName

func GenerateRootCASecretName() string

func GenerateTLSPairSecretName

func GenerateTLSPairSecretName() string

func NewCertRenewer

func NewCertRenewer(
	client controllerutils.ObjectClient[*corev1.Secret],
	lister corev1listers.SecretNamespaceLister,
	certRenewalInterval,
	caValidityDuration,
	tlsValidityDuration time.Duration,
	server string,
) *certRenewer

NewCertRenewer returns an instance of CertRenewer

func ReadRootCASecret

func ReadRootCASecret(client corev1listers.SecretNamespaceLister) ([]byte, error)

ReadRootCASecret returns the RootCA from the pre-defined secret

Types

type CertRenewer

type CertRenewer interface {
	// RenewCA renews the CA certificate if needed
	RenewCA(context.Context) error
	// RenewTLS renews the TLS certificate if needed
	RenewTLS(context.Context) error
}

type CertValidator

type CertValidator interface {
	// ValidateCert checks the certificates validity
	ValidateCert() (bool, error)
}