tls

Documentation

Index

• Constants
• func NewCertRenewer(client client, ...) *certRenewer
• func ReadRootCASecret(name, namespace string, client corev1listers.SecretNamespaceLister) ([]byte, error)
• type CertRenewer
• type CertValidator

Constants

const (
	// CertRenewalInterval is the renewal interval for rootCA
	CertRenewalInterval = 12 * time.Hour
	// CAValidityDuration is the valid duration for CA certificates
	CAValidityDuration = 365 * 24 * time.Hour
	// TLSValidityDuration is the valid duration for TLS certificates
	TLSValidityDuration = 150 * 24 * time.Hour
)

Functions

func NewCertRenewer

func NewCertRenewer(
	client client,
	certRenewalInterval,
	caValidityDuration,
	tlsValidityDuration,
	renewBefore time.Duration,
	server string,
	commonName string,
	dnsNames []string,
	namespace string,
	caSecret string,
	pairSecret string,
) *certRenewer

NewCertRenewer returns an instance of CertRenewer

func ReadRootCASecret

func ReadRootCASecret(name, namespace string, client corev1listers.SecretNamespaceLister) ([]byte, error)

ReadRootCASecret returns the RootCA from the pre-defined secret

Types

type CertRenewer

type CertRenewer interface {
	// RenewCA renews the CA certificate if needed
	RenewCA(context.Context) error
	// RenewTLS renews the TLS certificate if needed
	RenewTLS(context.Context) error
}

type CertValidator

type CertValidator interface {
	// ValidateCert checks the certificates validity
	ValidateCert(context.Context) (bool, error)
}