tls

Documentation

Index

• Variables
• func CACertificateSecretName(cr *api.PerconaServerMongoDB) string
• func CertificateSecretName(cr *api.PerconaServerMongoDB, internal bool) string
• func Config(ctx context.Context, k8sclient client.Client, cr *api.PerconaServerMongoDB) (tls.Config, error)
• func GetCertificateSans(cr *api.PerconaServerMongoDB) []string
• func IsSecretCreatedByUser(ctx context.Context, c client.Client, cr *api.PerconaServerMongoDB, ...) (bool, error)
• func Issue(hosts []string) (caCert []byte, tlsCert []byte, tlsKey []byte, err error)
• func MergePEM(target []byte, toMerge ...[]byte) ([]byte, error)
• type CertManagerController
  • func NewCertManagerController(cl client.Client, scheme *runtime.Scheme, dryRun bool) CertManagerController
• type NewCertManagerControllerFunc

Variables

var (
	ErrCertManagerNotFound = errors.New("cert-manager not found")
	ErrCertManagerNotReady = errors.New("cert-manager not ready")
)

Functions

func CACertificateSecretName

func CACertificateSecretName(cr *api.PerconaServerMongoDB) string

func CertificateSecretName

func CertificateSecretName(cr *api.PerconaServerMongoDB, internal bool) string

func Config

func Config(ctx context.Context, k8sclient client.Client, cr *api.PerconaServerMongoDB) (tls.Config, error)

Config returns tls.Config to be used in mongo.Config

func GetCertificateSans

func GetCertificateSans(cr *api.PerconaServerMongoDB) []string

func IsSecretCreatedByUser

func IsSecretCreatedByUser(ctx context.Context, c client.Client, cr *api.PerconaServerMongoDB, secret *corev1.Secret) (bool, error)

func Issue

func Issue(hosts []string) (caCert []byte, tlsCert []byte, tlsKey []byte, err error)

Issue returns CA certificate, TLS certificate and TLS private key

func MergePEM

func MergePEM(target []byte, toMerge ...[]byte) ([]byte, error)

Types

type CertManagerController

type CertManagerController interface {
	ApplyIssuer(ctx context.Context, cr *api.PerconaServerMongoDB) (util.ApplyStatus, error)
	ApplyCAIssuer(ctx context.Context, cr *api.PerconaServerMongoDB) (util.ApplyStatus, error)
	ApplyCertificate(ctx context.Context, cr *api.PerconaServerMongoDB, internal bool) (util.ApplyStatus, error)
	ApplyCACertificate(ctx context.Context, cr *api.PerconaServerMongoDB) (util.ApplyStatus, error)
	DeleteDeprecatedIssuerIfExists(ctx context.Context, cr *api.PerconaServerMongoDB) error
	WaitForCerts(ctx context.Context, cr *api.PerconaServerMongoDB, secretsList ...string) error
	GetMergedCA(ctx context.Context, cr *api.PerconaServerMongoDB, secretNames []string) ([]byte, error)
	Check(ctx context.Context, config *rest.Config, ns string) error
	IsDryRun() bool
	GetClient() client.Client
}

func NewCertManagerController

func NewCertManagerController(cl client.Client, scheme *runtime.Scheme, dryRun bool) CertManagerController

type NewCertManagerControllerFunc

type NewCertManagerControllerFunc func(cl client.Client, scheme *runtime.Scheme, dryRun bool) CertManagerController