secrets

Documentation

Index

• Constants
• type IntermediateCAData
  • func IntermediateCADataFromSecretData(data map[string][]byte) IntermediateCAData
  • func (d IntermediateCAData) ToSecretData() map[string][]byte
• type RootCAData
  • func RootCADataFromSecretData(data map[string][]byte) RootCAData
  • func (c *RootCAData) ToSecretData() map[string][]byte

Constants

const (
	/*
		TODO(ilackarms): document the expected structure of secrets (required for VirtualMeshes  using a user-provided root CA)
	*/
	// CaCertID is the CA certificate chain file.
	CaCertID = "ca-cert.pem"
	// CaPrivateKeyID is the private key file of CA.
	CaPrivateKeyID = "ca-key.pem"
	// CertChainID is the ID/name for the certificate chain file.
	CertChainID = "cert-chain.pem"
	// RootPrivateKeyID is the ID/name for the private key file.
	// Unfortunately has to be `key.pem`, not `root-key.pem` to match istio :(
	RootPrivateKeyID = "key.pem"
	// RootCertID is the ID/name for the CA root certificate file.
	RootCertID = "root-cert.pem"
)

Types

type IntermediateCAData

type IntermediateCAData struct {
	RootCAData
	CertChain    []byte
	CaCert       []byte
	CaPrivateKey []byte
}

The intermediate CA derived from the root CA of the MeshGroup

func IntermediateCADataFromSecretData

func IntermediateCADataFromSecretData(data map[string][]byte) IntermediateCAData

func (IntermediateCAData) ToSecretData

func (d IntermediateCAData) ToSecretData() map[string][]byte

type RootCAData

type RootCAData struct {
	PrivateKey []byte
	RootCert   []byte
}

The root CA from the perspective of the MeshGroup A user supplied root cert may be itself derived from another CA, but that is irrelevant for the MeshGroup.

func RootCADataFromSecretData

func RootCADataFromSecretData(data map[string][]byte) RootCAData

func (*RootCAData) ToSecretData

func (c *RootCAData) ToSecretData() map[string][]byte