vault

Documentation

Overview

Package vault provides adapter to connect to vault server.

Index

• type CA
  • func (v *CA) GetKeyCertBundle() util.KeyCertBundle
  • func (v *CA) Sign(csrPEM []byte, ttl time.Duration) ([]byte, error)
  • func (v *CA) SignCAServerCert(csrPEM []byte, ttl time.Duration) ([]byte, error)

Types

type CA

type CA struct {
}

CA connects to Vault to sign certificates.

func (*CA) GetKeyCertBundle

func (v *CA) GetKeyCertBundle() util.KeyCertBundle

GetKeyCertBundle returns the KeyCertBundle for the CA.

func (*CA) Sign

func (v *CA) Sign(csrPEM []byte, ttl time.Duration) ([]byte, error)

Sign takes a PEM-encoded CSR and returns a signed certificate. If the CA is a multicluster CA, the signed certificate is a CA certificate (CA:TRUE in X509v3 Basic Constraints), otherwise, it is a workload certificate.

func (*CA) SignCAServerCert

func (v *CA) SignCAServerCert(csrPEM []byte, ttl time.Duration) ([]byte, error)

SignCAServerCert signs the certificate for the Istio CA server (to serve the CSR, etc).