security

Documentation

Index

• Constants
• func GenerateWebhookCert(ctx context.Context, log *logr.Logger, cfg *rest.Config, ...) error
• func PatchWebhookCABundle(ctx context.Context, log *logr.Logger, cfg *rest.Config, caCert []byte, ...) error
• func PatchWebhookCABundleFromSecret(ctx context.Context, log *logr.Logger, cfg *rest.Config, ...) error
• type Certificate
  • func NewCertificate(ca Certificate, keySize int, commonName string, dnsNames []string) (Certificate, error)
  • func NewSelfSignedCACertificate(keySize int) (Certificate, error)

Constants

const CACertKey = "ca.crt"

Functions

func GenerateWebhookCert

func GenerateWebhookCert(ctx context.Context, log *logr.Logger, cfg *rest.Config, certDir, prefixName, ns string) error

GenerateWebhookCert will create the cert to be used by the webhook. On success, this will have created the certs in the cert directory (CertDir). This is only called when deploying the operator and they have chosen that an internal self-signed cert is used.

func PatchWebhookCABundle

func PatchWebhookCABundle(ctx context.Context, log *logr.Logger, cfg *rest.Config, caCert []byte, prefixName, ns string) error

PatchWebhookCABundle will update the webhook configuration with the given CA cert.

func PatchWebhookCABundleFromSecret

func PatchWebhookCABundleFromSecret(ctx context.Context, log *logr.Logger, cfg *rest.Config, secretName, prefixName, ns string) error

PatchWebhookCABundleFromSecret will update the webhook configurations with the CA cert in the given secret.

Types

type Certificate

type Certificate interface {
	TLSKey() []byte
	TLSCrt() []byte
	Buildx509() (*x509.Certificate, error)
	BuildPrivateKey() (*rsa.PrivateKey, error)
}

func NewCertificate

func NewCertificate(ca Certificate, keySize int, commonName string, dnsNames []string) (Certificate, error)

NewCertificate will create a certificate using the given CA.

func NewSelfSignedCACertificate

func NewSelfSignedCACertificate(keySize int) (Certificate, error)

NewSelfSignedCACertificate creates and returns a CA certificate