tls

Documentation

Index

• func CertificateToPem(certificateDER []byte) []byte
• func GenerateCACert() (*KeyPair, *PemPair, error)
• func GenerateInClusterServiceName(props CertificateProps) string
• func GeneratePrivateKey() (*rsa.PrivateKey, error)
• func IsTLSPairShouldBeUpdated(tlsPair *PemPair) bool
• func PrivateKeyToPem(rsaKey *rsa.PrivateKey) []byte
• type CertificateProps
• type KeyPair
• type PemPair
  • func GenerateCertPem(caCert *KeyPair, props CertificateProps, serverIP string) (*PemPair, error)

Functions

func CertificateToPem

func CertificateToPem(certificateDER []byte) []byte

CertificateToPem ...

func GenerateCACert

func GenerateCACert() (*KeyPair, *PemPair, error)

GenerateCACert creates the self-signed CA cert and private key it will be used to sign the webhook server certificate

func GenerateInClusterServiceName

func GenerateInClusterServiceName(props CertificateProps) string

GenerateInClusterServiceName The generated service name should be the common name for TLS certificate

func GeneratePrivateKey

func GeneratePrivateKey() (*rsa.PrivateKey, error)

GeneratePrivateKey Generates RSA private key

func IsTLSPairShouldBeUpdated

func IsTLSPairShouldBeUpdated(tlsPair *PemPair) bool

IsTLSPairShouldBeUpdated checks if TLS pair has expited and needs to be updated

func PrivateKeyToPem

func PrivateKeyToPem(rsaKey *rsa.PrivateKey) []byte

PrivateKeyToPem Creates PEM block from private key object

Types

type CertificateProps

type CertificateProps struct {
	Service       string
	Namespace     string
	APIServerHost string
	ServerIP      string
}

CertificateProps Properties of TLS certificate which should be issued for webhook server

type KeyPair

type KeyPair struct {
	Cert *x509.Certificate
	Key  *rsa.PrivateKey
}

KeyPair ...

type PemPair

type PemPair struct {
	Certificate []byte
	PrivateKey  []byte
}

PemPair The pair of TLS certificate corresponding private key, both in PEM format

func GenerateCertPem

func GenerateCertPem(caCert *KeyPair, props CertificateProps, serverIP string) (*PemPair, error)

GenerateCertPem takes the results of GenerateCACert and uses it to create the PEM-encoded public certificate and private key, respectively