secrets

Documentation

Index

• Constants
• type CAData
  • func CADataFromSecretData(data map[string][]byte) CAData
  • func (d CAData) ToSecretData() map[string][]byte
  • func (d CAData) Verify() error

Constants

const (
	/*
		TODO(ilackarms): document the expected structure of secrets (required for VirtualMeshes  using a user-provided root CA)
	*/
	// CaCertID is the CA certificate chain file.
	CaCertID = "ca-cert.pem"
	// CaPrivateKeyID is the private key file of CA.
	CaPrivateKeyID = "ca-key.pem"
	// CertChainID is the ID/name for the certificate chain file.
	CertChainID = "cert-chain.pem"
	// RootCertID is the ID/name for the CA root certificate file.
	RootCertID = "root-cert.pem"
)

Types

type CAData

type CAData struct {
	RootCert     []byte
	CertChain    []byte
	CaCert       []byte
	CaPrivateKey []byte
}

The intermediate CA derived from the root CA of the MeshGroup

func CADataFromSecretData

func CADataFromSecretData(data map[string][]byte) CAData

func (CAData) ToSecretData

func (d CAData) ToSecretData() map[string][]byte

func (CAData) Verify

func (d CAData) Verify() error

Verify the CA Data Copied from https://github.com/istio/istio/blob/943ba0765876590d5c6da89d5df034fe0ea0808a/security/pkg/pki/util/keycertbundle.go#L264