secrets

Documentation

Overview

Package secrets provides resources which store secrets.

Index

• Constants
• type Etcd
  • func NewEtcd() *Etcd
  • func (r *Etcd) Certs() *EtcdCertsSpec
  • func (r *Etcd) DeepCopy() resource.Resource
  • func (r *Etcd) Metadata() *resource.Metadata
  • func (r *Etcd) ResourceDefinition() meta.ResourceDefinitionSpec
  • func (r *Etcd) Spec() interface{}
  • func (r *Etcd) String() string
• type EtcdCertsSpec
• type Kubernetes
  • func NewKubernetes() *Kubernetes
  • func (r *Kubernetes) Certs() *KubernetesCertsSpec
  • func (r *Kubernetes) DeepCopy() resource.Resource
  • func (r *Kubernetes) Metadata() *resource.Metadata
  • func (r *Kubernetes) ResourceDefinition() meta.ResourceDefinitionSpec
  • func (r *Kubernetes) Spec() interface{}
  • func (r *Kubernetes) String() string
• type KubernetesCertsSpec
• type Root
  • func NewRoot(id resource.ID) *Root
  • func (r *Root) DeepCopy() resource.Resource
  • func (r *Root) EtcdSpec() *RootEtcdSpec
  • func (r *Root) KubernetesSpec() *RootKubernetesSpec
  • func (r *Root) Metadata() *resource.Metadata
  • func (r *Root) ResourceDefinition() meta.ResourceDefinitionSpec
  • func (r *Root) Spec() interface{}
  • func (r *Root) String() string
• type RootEtcdSpec
• type RootKubernetesSpec

Constants

const (
	RootEtcdID       = resource.ID("etcd")
	RootKubernetesID = resource.ID("k8s")
)

IDs of various resources of RootType.

const EtcdID = resource.ID("etcd")

EtcdID is a resource ID of singletone instance.

const EtcdType = resource.Type("EtcdSecrets.secrets.talos.dev")

EtcdType is type of Etcd resource.

const KubernetesID = resource.ID("k8s-certs")

KubernetesID is a resource ID of singleton instance.

const KubernetesType = resource.Type("KubernetesSecrets.secrets.talos.dev")

KubernetesType is type of Kubernetes resource.

const NamespaceName resource.Namespace = "secrets"

NamespaceName contains resources containing secret material.

const RootType = resource.Type("RootSecrets.secrets.talos.dev")

RootType is type of Root secret resource.

Types

type Etcd

type Etcd struct {
	// contains filtered or unexported fields
}

Etcd contains etcd generated secrets.

func NewEtcd

func NewEtcd() *Etcd

NewEtcd initializes a Etc resource.

func (*Etcd) Certs

func (r *Etcd) Certs() *EtcdCertsSpec

Certs returns .spec.

func (*Etcd) DeepCopy

func (r *Etcd) DeepCopy() resource.Resource

DeepCopy implements resource.Resource.

func (*Etcd) Metadata

func (r *Etcd) Metadata() *resource.Metadata

Metadata implements resource.Resource.

func (*Etcd) ResourceDefinition

func (r *Etcd) ResourceDefinition() meta.ResourceDefinitionSpec

ResourceDefinition implements meta.ResourceDefinitionProvider interface.

func (*Etcd) Spec

func (r *Etcd) Spec() interface{}

Spec implements resource.Resource.

func (*Etcd) String

func (r *Etcd) String() string

type EtcdCertsSpec

type EtcdCertsSpec struct {
	EtcdPeer *x509.PEMEncodedCertificateAndKey `yaml:"etcdPeer"`
}

EtcdCertsSpec describes etcd certs secrets.

type Kubernetes

type Kubernetes struct {
	// contains filtered or unexported fields
}

Kubernetes contains K8s generated secrets.

func NewKubernetes

func NewKubernetes() *Kubernetes

NewKubernetes initializes a Kubernetes resource.

func (*Kubernetes) Certs

func (r *Kubernetes) Certs() *KubernetesCertsSpec

Certs returns .spec.

func (*Kubernetes) DeepCopy

func (r *Kubernetes) DeepCopy() resource.Resource

DeepCopy implements resource.Resource.

func (*Kubernetes) Metadata

func (r *Kubernetes) Metadata() *resource.Metadata

Metadata implements resource.Resource.

func (*Kubernetes) ResourceDefinition

func (r *Kubernetes) ResourceDefinition() meta.ResourceDefinitionSpec

ResourceDefinition implements meta.ResourceDefinitionProvider interface.

func (*Kubernetes) Spec

func (r *Kubernetes) Spec() interface{}

Spec implements resource.Resource.

func (*Kubernetes) String

func (r *Kubernetes) String() string

type KubernetesCertsSpec

type KubernetesCertsSpec struct {
	APIServer              *x509.PEMEncodedCertificateAndKey `yaml:"apiServer"`
	APIServerKubeletClient *x509.PEMEncodedCertificateAndKey `yaml:"apiServerKubeletClient"`
	FrontProxy             *x509.PEMEncodedCertificateAndKey `yaml:"frontProxy"`

	AdminKubeconfig string `yaml:"adminKubeconfig"`
}

KubernetesCertsSpec describes generated Kubernetes certificates.

type Root

type Root struct {
	// contains filtered or unexported fields
}

Root contains root (not generated) secrets.

func NewRoot

func NewRoot(id resource.ID) *Root

NewRoot initializes a Root resource.

func (*Root) DeepCopy

func (r *Root) DeepCopy() resource.Resource

DeepCopy implements resource.Resource.

func (*Root) EtcdSpec

func (r *Root) EtcdSpec() *RootEtcdSpec

EtcdSpec returns .spec.

func (*Root) KubernetesSpec

func (r *Root) KubernetesSpec() *RootKubernetesSpec

KubernetesSpec returns .spec.

func (*Root) Metadata

func (r *Root) Metadata() *resource.Metadata

Metadata implements resource.Resource.

func (*Root) ResourceDefinition

func (r *Root) ResourceDefinition() meta.ResourceDefinitionSpec

ResourceDefinition implements meta.ResourceDefinitionProvider interface.

func (*Root) Spec

func (r *Root) Spec() interface{}

Spec implements resource.Resource.

func (*Root) String

func (r *Root) String() string

type RootEtcdSpec

type RootEtcdSpec struct {
	EtcdCA *x509.PEMEncodedCertificateAndKey `yaml:"etcdCA"`
}

RootEtcdSpec describes etcd CA secrets.

type RootKubernetesSpec

type RootKubernetesSpec struct {
	Name         string   `yaml:"name"`
	Endpoint     *url.URL `yaml:"endpoint"`
	CertSANs     []string `yaml:"certSANs"`
	APIServerIPs []net.IP `yaml:"apiServerIPs"`
	DNSDomain    string   `yaml:"dnsDomain"`

	CA             *x509.PEMEncodedCertificateAndKey `yaml:"ca"`
	ServiceAccount *x509.PEMEncodedKey               `yaml:"serviceAccount"`
	AggregatorCA   *x509.PEMEncodedCertificateAndKey `yaml:"aggregatorCA"`

	AESCBCEncryptionSecret string `yaml:"aesCBCEncryptionSecret"`

	BootstrapTokenID     string `yaml:"bootstrapTokenID"`
	BootstrapTokenSecret string `yaml:"bootstrapTokenSecret"`
}

RootKubernetesSpec describes root Kubernetes secrets.