resources

Documentation

Index

• Constants
• Variables
• func CreateCerts(ctx context.Context, name, namespace string, notAfter time.Time) (serverKey, serverCert, caCert []byte, err error)
• func MakeSecretInternal(ctx context.Context, name, namespace, serviceName string) (*corev1.Secret, error)

Constants

const (
	// ServerKey is the name of the key associated with the secret's private key.
	ServerKey = "server-key.pem"
	// ServerCert is the name of the key associated with the secret's public key.
	ServerCert = "server-cert.pem"
	// CACert is the name of the key associated with the certificate of the CA for
	// the keypair.
	CACert = "ca-cert.pem"
)

Variables

var MakeSecret = MakeSecretInternal

MakeSecret synthesizes a Kubernetes Secret object with the keys specified by ServerKey, ServerCert, and CACert populated with a fresh certificate. This is mutable to make deterministic testing possible.

Functions

func CreateCerts

func CreateCerts(ctx context.Context, name, namespace string, notAfter time.Time) (serverKey, serverCert, caCert []byte, err error)

CreateCerts creates and returns a CA certificate and certificate and key for the server. serverKey and serverCert are used by the server to establish trust for clients, CA certificate is used by the client to verify the server authentication chain. notAfter specifies the expiration date.

func MakeSecretInternal

func MakeSecretInternal(ctx context.Context, name, namespace, serviceName string) (*corev1.Secret, error)

MakeSecretInternal is only public so MakeSecret can be restored in testing. Use MakeSecret.