tls

Documentation

Index

• Constants
• Variables
• func GenerateRootCASecretName() string
• func GenerateTLSPairSecretName() string
• func NewCertRenewer(client controllerutils.ObjectClient[*corev1.Secret], ...) *certRenewer
• func ReadRootCASecret(client controllerutils.GetClient[*corev1.Secret]) ([]byte, error)
• type CertRenewer
• type CertValidator

Constants

const (
	// CertRenewalInterval is the renewal interval for rootCA
	CertRenewalInterval = 12 * time.Hour
	// CAValidityDuration is the valid duration for CA certificates
	CAValidityDuration = 365 * 24 * time.Hour
	// TLSValidityDuration is the valid duration for TLS certificates
	TLSValidityDuration = 150 * 24 * time.Hour
)

Variables

var ErrorsNotFound = "root CA certificate not found"

Functions

func GenerateRootCASecretName

func GenerateRootCASecretName() string

func GenerateTLSPairSecretName

func GenerateTLSPairSecretName() string

func NewCertRenewer

func NewCertRenewer(client controllerutils.ObjectClient[*corev1.Secret], certRenewalInterval, caValidityDuration, tlsValidityDuration time.Duration, server string) *certRenewer

NewCertRenewer returns an instance of CertRenewer

func ReadRootCASecret

func ReadRootCASecret(client controllerutils.GetClient[*corev1.Secret]) ([]byte, error)

ReadRootCASecret returns the RootCA from the pre-defined secret

Types

type CertRenewer

type CertRenewer interface {
	// RenewCA renews the CA certificate if needed
	RenewCA() error
	// RenewTLS renews the TLS certificate if needed
	RenewTLS() error
}

type CertValidator

type CertValidator interface {
	// ValidateCert checks the certificates validity
	ValidateCert() (bool, error)
}