models

Documentation

Index

• type CAOptions
• type GetCertOptions
• type IssueCAOptions
• type IssueCertOptions
• type ProviderName
• type SecretOptions

Types

type CAOptions

type CAOptions struct {
	// CertRequest encapsulates all the configurable parameters for creating
	// Certificate Request
	CertRequest x509.CertificateRequest `yaml:"certSigningRequestParams"`
	// ValidityDays represents the number of validity days before the CA expires.
	// This should not exceed the validity days of Root CA.
	ValidityDays int64 `yaml:"validityDays"`
	// KeyLength is the length(bits) of Key to be created.
	KeyLength int `yaml:"keyLength"`
}

CAOptions are the customizable options available for Issuing Intermediate CA.

type GetCertOptions

type GetCertOptions struct {
	// CertNameIdentifier is a unique Identifier
	// for fetching Certificate.
	CertNameIdentifier string
}

GetCertOptions are the options used to get Cert.

type IssueCAOptions

type IssueCAOptions struct {
	// SecretOptions encapsulates all the Secret related
	// options used for issuing CA.
	SecretOptions `yaml:"secretOptions"`
	// CAOptions encapsulates all the CA related options
	// used for issuing CA.
	CAOptions `yaml:"caOptions"`
}

IssueCAOptions are the options available for CA creation/

type IssueCertOptions

type IssueCertOptions struct {
	// CertRequest encapsulates all the configurable parameters for creating
	// Certificate Request
	CertRequest x509.CertificateRequest
	// CSR represents Certificate Signing Request
	CSR []byte
	// ValidityType is set to `DAYS`
	ValidityType string
	// ValidityValue is the integer to be set as
	// the CA ValidityDays.
	ValidityValue int64
}

IssueCertOptions are the options used to Issue new Cert.

type ProviderName

type ProviderName string

ProviderName to specify the Name of the Provider to be used.

const (
	// GCP is yet not implemented yet.
	GCP ProviderName = "gcp"
	// AWS is identifier for using ACMPCA.
	AWS ProviderName = "aws"
)

type SecretOptions

type SecretOptions struct {
	// IstioNamespace is the namespace in which the `cacerts` secret
	// is created after a successful workflow.
	IstioNamespace string `yaml:"istioCANamespace"`
	// SecretFilePath is the file path used to store the Kubernetes Secret
	// to be applied afterwards.
	SecretFilePath string `yaml:"secretFilePath"`
	// OverrideExistingCACertSecret flag, when enabled, overrides the existing `cacerts` secret
	// in istioNamespace, and creates a new one.
	OverrideExistingCACertSecret bool `yaml:"overrideExistingCACertsSecret"`
}

SecretOptions are the option available for secret creation.