cert

Documentation

Index

• Constants
• type Interface
  • func BuildCert() (Interface, error)
  • func LoadCaKeyAndPem(key, pem []byte) (Interface, error)
• type Options
  • func KubernetesCaCreditOpts() *Options

Constants

const (
	// DefaultRSAKeySize is the default key size used when created RSA keys.
	DefaultRSAKeySize = 2048

	// DefaultCertDuration is the default lifespan used when creating certificates (10 years).
	DefaultCertDuration = time.Hour * 24 * 365 * 10

	RSAKeyType            = "RSA PRIVATE KEY"
	PublicKeyType         = "PUBLIC KEY"
	CertificateType       = "CERTIFICATE"
	SystemPrivilegedGroup = "system:masters"
)

Types

type Interface

type Interface interface {
	SignedCert(opts *Options) (Interface, error)
	GetEncodeKeyAndCert() ([]byte, []byte, error)
}

func BuildCert

func BuildCert() (Interface, error)

BuildCert create a new credit.

func LoadCaKeyAndPem

func LoadCaKeyAndPem(key, pem []byte) (Interface, error)

LoadCaKeyAndPem parses the ca key and pem.

type Options

type Options struct {
	CommonName   string
	Organization []string
	DNSNames     []string
	IPAddresses  []net.IP
	Usages       x509.KeyUsage
	ExtKeyUsage  []x509.ExtKeyUsage
	SelfSigned   bool
}

Options contains the basic fields required for creating a certificate.

func KubernetesCaCreditOpts

func KubernetesCaCreditOpts() *Options

KubernetesCaCreditOpts default kubernetes ca credit options