onmetalapinet

Documentation

Index

• Variables
• func IsAPINetletClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool
• func ValidateAPINetletClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error

Variables

var (
	APINetletRecognizer = generic.NewCertificateSigningRequestRecognizer(
		IsAPINetletClientCert,
		authv1.ResourceAttributes{
			Group:       certificatesv1.GroupName,
			Resource:    "certificatesigningrequests",
			Verb:        "create",
			Subresource: "apinetletclient",
		},
		"Auto approving apinetlet client certificate after SubjectAccessReview.",
	)
)

var (
	APINetletRequiredUsages = sets.New[certificatesv1.KeyUsage](
		certificatesv1.UsageDigitalSignature,
		certificatesv1.UsageKeyEncipherment,
		certificatesv1.UsageClientAuth,
	)
)

var Recognizers []generic.CertificateSigningRequestRecognizer

Functions

func IsAPINetletClientCert

func IsAPINetletClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool

func ValidateAPINetletClientCSR

func ValidateAPINetletClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error