chiron

Documentation

Index

• func GenKeyCertK8sCA(client clientset.Interface, dnsName, caFilePath string, signerName string, ...) ([]byte, []byte, []byte, error)
• func SignCSRK8s(client clientset.Interface, csrData []byte, signerName string, ...) ([]byte, []byte, error)

Functions

func GenKeyCertK8sCA

func GenKeyCertK8sCA(client clientset.Interface, dnsName,
	caFilePath string, signerName string, approveCsr bool, requestedLifetime time.Duration,
) ([]byte, []byte, []byte, error)

GenKeyCertK8sCA : Generates a key pair and gets public certificate signed by K8s_CA Options are meant to sign DNS certs 1. Generate a CSR 2. Call SignCSRK8s to finish rest of the flow

func SignCSRK8s

func SignCSRK8s(client clientset.Interface, csrData []byte, signerName string, usages []cert.KeyUsage,
	dnsName, caFilePath string, approveCsr, appendCaCert bool, requestedLifetime time.Duration,
) ([]byte, []byte, error)

SignCSRK8s generates a certificate from CSR using the K8s CA 1. Submit a CSR 2. Approve a CSR 3. Read the signed certificate 4. Clean up the artifacts (e.g., delete CSR)