certificate

Documentation

Index

• Constants
• type YurtCertificateManager
• type YurtClientCertificateManager
• type YurtServerCertificateManager

Constants

const (
	// KubeletCertificateBootstrapMode means that yurthub uses kubelet certificate
	// that located at /var/lib/kubelet/pki/current-kubelet.pem to bootstrap instead of
	// generating client certificates.
	KubeletCertificateBootstrapMode = "kubeletcertificate"

	// TokenBootstrapMode means that yurthub uses join token to create client certificates
	// and bootstrap itself.
	TokenBootstrapMode = "token"
)

Types

type YurtCertificateManager

type YurtCertificateManager interface {
	YurtClientCertificateManager
	YurtServerCertificateManager
	// Ready should be called after yurt certificate manager started by Start.
	Ready() bool
}

YurtCertificateManager is responsible for managing node certificate for yurthub

type YurtClientCertificateManager

type YurtClientCertificateManager interface {
	Start()
	Stop()
	UpdateBootstrapConf(joinToken string) error
	GetHubConfFile() string
	GetCAData() []byte
	GetCaFile() string
	GetAPIServerClientCert() *tls.Certificate
}

YurtClientCertificateManager is responsible for managing node client certificates for yurthub

type YurtServerCertificateManager

type YurtServerCertificateManager interface {
	Start()
	Stop()
	GetHubServerCert() *tls.Certificate
	GetHubServerCertFile() string
}