pki

May 29, 2024 GO-2024-2930

  GO-2024-2930: RKE credentials are stored in the RKE1 Cluster state ConfigMap in github.com/rancher/rke

May 13, 2024 GO-2024-2930

  GO-2024-2930: RKE credentials are stored in the RKE1 Cluster state ConfigMap in github.com/rancher/rke

May 29, 2024 GO-2024-2930

  GO-2024-2930: RKE credentials are stored in the RKE1 Cluster state ConfigMap in github.com/rancher/rke

May 13, 2024 GO-2024-2930

  GO-2024-2930: RKE credentials are stored in the RKE1 Cluster state ConfigMap in github.com/rancher/rke

Nov 11, 2022

Changes in this version

type CertificatePKI

+ func ToCertObjectWithCertPEM(componentName, commonName, ouName string, certificate *x509.Certificate, ...) CertificatePKI

Aug 21, 2020

Changes in this version

+ const ClusterStateExt

+ const K8sBaseDir

Nov 26, 2019

Changes in this version

+ const KubeletCertName

+ func DeepEqualIPsAltNames(oldIPs, newIPs []net.IP) bool

+ func GenerateKubeletCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeletCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GetCrtNameForHost(host *hosts.Host, prefix string) string

+ func GetIPHostAltnamesForHost(host *hosts.Host) *cert.AltNames

+ func IsKubeletGenerateServingCertificateEnabledinConfig(rkeConfig *v3.RancherKubernetesEngineConfig) bool

Jul 12, 2019

Changes in this version

+ func IsValidCertStr(c string) (bool, error)

+ func ReadCertToStr(file string) (string, error)

Mar 20, 2019

Changes in this version

+ const ServiceAccountTokenKeyName

+ func GenerateAPIProxyClientCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateAPIProxyClientCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateCertSigningRequestAndKey(serverCrt bool, commonName string, altNames *cert.AltNames, ...) ([]byte, *rsa.PrivateKey, error)

+ func GenerateEtcdCSRs(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateEtcdCertificates(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateExternalEtcdCertificates(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeAPICSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeAPICertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeAdminCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeAdminCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeControllerCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeControllerCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeNodeCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeNodeCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeProxyCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeProxyCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeSchedulerCSR(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateKubeSchedulerCertificate(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateRKECACerts(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateRKEMasterCACert(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateRKERequestHeaderCACert(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateRKEServicesCSRs(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateRKEServicesCerts(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func GenerateServiceTokenKey(ctx context.Context, certs map[string]CertificatePKI, ...) error

+ func ReadCSRsAndKeysFromDir(certDir string) (map[string]CertificatePKI, error)

+ func ReadCertsAndKeysFromDir(certDir string) (map[string]CertificatePKI, error)

+ func TransformPEMToObject(in map[string]CertificatePKI) map[string]CertificatePKI

+ func ValidateBundleContent(rkeConfig *v3.RancherKubernetesEngineConfig, ...) error

+ func WriteCertificates(certDirPath string, certBundle map[string]CertificatePKI) error

+ type CSRFunc func(context.Context, map[string]CertificatePKI, v3.RancherKubernetesEngineConfig) error

type CertificatePKI

+ CSR *x509.CertificateRequest

+ CSRPEM string

+ CertificatePEM string

+ KeyPEM string

+ type GenFunc func(context.Context, map[string]CertificatePKI, v3.RancherKubernetesEngineConfig, ...) error

Apr 16, 2019

Changes in this version

+ func RotateRKECerts(ctx context.Context, certs map[string]CertificatePKI, ...) (map[string]CertificatePKI, error)

Oct 4, 2018

Changes in this version

+ const ClusterStateEnv

+ const ClusterStateFile

+ const StateDeployerContainerName

+ func DeployStateOnPlaneHost(ctx context.Context, host *hosts.Host, stateDownloaderImage string, ...) error

Aug 9, 2018

Changes in this version

+ const APIProxyClientCertName

+ const RequestHeaderCACertName

+ func GenerateCACertAndKey(commonName string) (*x509.Certificate, *rsa.PrivateKey, error)

Jul 6, 2018

Changes in this version

+ const BundleCertContainer

+ const BundleCertPath

+ func ExtractBackupBundleOnHost(ctx context.Context, host *hosts.Host, ...) error

+ func SaveBackupBundleOnHost(ctx context.Context, host *hosts.Host, ...) error

May 17, 2018

Changes in this version

+ func FetchFileFromHost(ctx context.Context, filePath, image string, host *hosts.Host, ...) (string, error)

Mar 6, 2018

Changes in this version

+ const ClusterConfig

+ const EtcdClientCACertName

+ const EtcdClientCertName

+ func GenerateRKECerts(ctx context.Context, rkeConfig v3.RancherKubernetesEngineConfig, ...) (map[string]CertificatePKI, error)

+ func GenerateRKENodeCerts(ctx context.Context, rkeConfig v3.RancherKubernetesEngineConfig, ...) map[string]CertificatePKI

+ func GetKubernetesServiceIP(serviceClusterRange string) (net.IP, error)

+ func GetLocalKubeConfig(configPath, configDir string) string

Feb 7, 2018

Changes in this version

+ const CertPathPrefix

+ const EtcdCertName

+ const KubeAdminCertName

+ const KubeControllerCertName

+ const KubeNodeCertName

+ const KubeProxyCertName

+ const KubeSchedulerCertName

+ func DeployCertificatesOnPlaneHost(ctx context.Context, host *hosts.Host, etcdHosts []*hosts.Host, ...) error

+ func GenerateSignedCertAndKey(caCrt *x509.Certificate, caKey *rsa.PrivateKey, serverCrt bool, ...) (*x509.Certificate, *rsa.PrivateKey, error)

+ func GetCertPath(name string) string

+ func GetCertTempPath(name string) string

+ func GetConfigPath(name string) string

+ func GetConfigTempPath(name string) string

+ func GetEtcdCrtName(address string) string

+ func GetKeyPath(name string) string

+ func GetKeyTempPath(name string) string

+ func RegenerateEtcdCertificate(ctx context.Context, crtMap map[string]CertificatePKI, etcdHost *hosts.Host, ...) (map[string]CertificatePKI, error)

type CertificatePKI

+ func ToCertObject(componentName, commonName, ouName string, cert *x509.Certificate, ...) CertificatePKI

Jan 24, 2018

Changes in this version

+ const CACertENVName

+ const CACertName

+ const CACertPath

+ const CAKeyENVName

+ const CAKeyPath

+ const CertFetcherContainer

+ const CertificatesSecretName

+ const CertificatesServiceName

+ const CrtDownloaderContainer

+ const KubeAPICertENVName

+ const KubeAPICertName

+ const KubeAPICertPath

+ const KubeAPIKeyENVName

+ const KubeAPIKeyPath

+ const KubeAdminCertEnvName

+ const KubeAdminCommonName

+ const KubeAdminConfigENVName

+ const KubeAdminConfigPrefix

+ const KubeAdminKeyEnvName

+ const KubeAdminOrganizationName

+ const KubeControllerCertENVName

+ const KubeControllerCertPath

+ const KubeControllerCommonName

+ const KubeControllerConfigENVName

+ const KubeControllerConfigPath

+ const KubeControllerKeyENVName

+ const KubeControllerKeyPath

+ const KubeControllerName

+ const KubeNodeCertENVName

+ const KubeNodeCertPath

+ const KubeNodeCommonName

+ const KubeNodeConfigENVName

+ const KubeNodeConfigPath

+ const KubeNodeKeyENVName

+ const KubeNodeKeyPath

+ const KubeNodeName

+ const KubeNodeOrganizationName

+ const KubeProxyCertENVName

+ const KubeProxyCertPath

+ const KubeProxyCommonName

+ const KubeProxyConfigENVName

+ const KubeProxyConfigPath

+ const KubeProxyKeyENVName

+ const KubeProxyKeyPath

+ const KubeProxyName

+ const KubeSchedulerCertENVName

+ const KubeSchedulerCertPath

+ const KubeSchedulerCommonName

+ const KubeSchedulerConfigENVName

+ const KubeSchedulerConfigPath

+ const KubeSchedulerKeyENVName

+ const KubeSchedulerKeyPath

+ const KubeSchedulerName

+ const TempCertPath

+ func DeployAdminConfig(ctx context.Context, kubeConfig, localConfigPath string) error

+ func DeployCertificatesOnHost(ctx context.Context, host *hosts.Host, crtMap map[string]CertificatePKI, ...) error

+ func DeployCertificatesOnMasters(ctx context.Context, cpHosts []*hosts.Host, crtMap map[string]CertificatePKI, ...) error

+ func DeployCertificatesOnWorkers(ctx context.Context, workerHosts []*hosts.Host, ...) error

+ func FetchCertificatesFromHost(ctx context.Context, host *hosts.Host, image, localConfigPath string) (map[string]CertificatePKI, error)

+ func GenerateCertWithKey(commonName string, key *rsa.PrivateKey, caCrt *x509.Certificate, ...) (*x509.Certificate, error)

+ func GenerateKubeAPICertAndKey(caCrt *x509.Certificate, caKey *rsa.PrivateKey, altNames *cert.AltNames) (*x509.Certificate, *rsa.PrivateKey, error)

+ func GetAltNames(cpHosts []*hosts.Host, clusterDomain string, KubernetesServiceIP net.IP) *cert.AltNames

+ func GetKubeConfigX509WithData(kubernetesURL string, componentName string, cacrt string, crt string, ...) string

+ func RemoveAdminConfig(ctx context.Context, localConfigPath string)

+ func StartCertificatesGeneration(ctx context.Context, cpHosts []*hosts.Host, workerHosts []*hosts.Host, ...) (map[string]CertificatePKI, error)

+ type CertificatePKI struct

+ Certificate *x509.Certificate

+ CommonName string

+ Config string

+ ConfigEnvName string

+ ConfigPath string

+ EnvName string

+ Key *rsa.PrivateKey

+ KeyEnvName string

+ KeyPath string

+ Name string

+ OUName string

+ Path string

+ func (c *CertificatePKI) CertToEnv() string

+ func (c *CertificatePKI) ConfigToEnv() string

+ func (c *CertificatePKI) KeyToEnv() string

+ func (c *CertificatePKI) ToEnv() []string