certs

Documentation

Index

• Constants
• func CertificateName(svcName string) string
• func CreateCertificate(ctx context.Context, l logr.Logger, c client.Client, svc corev1.Service, ...) error
• func GetServiceCA(ctx context.Context, c client.Client, l logr.Logger, caNamespace string) (string, error)

Constants

const (
	SelfSignedIssuerName = "service-ca-self-signed"
	CACertName           = "service-ca-certificate"
	CAName               = "service-ca"
	CASecretName         = "service-ca-root"
	ServiceIssuerName    = "service-ca-issuer"
)

const (
	// ServiceCertSecretLabelKey is the label key for linking the
	// Certificate secret to the service for which it was issued
	ServiceCertSecretLabelKey = "service.syn.tools/certificate"
)

Functions

func CertificateName

func CertificateName(svcName string) string

CertificateName returns the name for the Certificate resource belonging to the service with name `svcName`

func CreateCertificate

func CreateCertificate(ctx context.Context, l logr.Logger, c client.Client, svc corev1.Service, secretName string, scheme *runtime.Scheme) error

CreateCertificate creates a Certificate resource for an appropriately labeled service

func GetServiceCA

func GetServiceCA(ctx context.Context, c client.Client, l logr.Logger, caNamespace string) (string, error)

GetServiceCA returns the Service CA certificate as a string Intended to be called in the reconcile loop. Returns an error if the CA certificate isn't ready yet.