citadel

Documentation

Index

• type CitadelClient
  • func NewCitadelClient(opts *security.Options, tlsOpts *TLSOptions) (*CitadelClient, error)
  • func (c *CitadelClient) CSRSign(csrPEM []byte, certValidTTLInSec int64) (res []string, err error)
  • func (c *CitadelClient) Close()
  • func (c *CitadelClient) GetRootCertBundle() ([]string, error)
• type TLSOptions

Types

type CitadelClient

type CitadelClient struct {
	// contains filtered or unexported fields
}

func NewCitadelClient

func NewCitadelClient(opts *security.Options, tlsOpts *TLSOptions) (*CitadelClient, error)

NewCitadelClient create a CA client for Citadel.

func (*CitadelClient) CSRSign

func (c *CitadelClient) CSRSign(csrPEM []byte, certValidTTLInSec int64) (res []string, err error)

CSRSign calls Citadel to sign a CSR.

func (*CitadelClient) Close

func (c *CitadelClient) Close()

func (*CitadelClient) GetRootCertBundle

func (c *CitadelClient) GetRootCertBundle() ([]string, error)

GetRootCertBundle: Citadel (Istiod) CA doesn't publish any endpoint to retrieve CA certs

type TLSOptions

type TLSOptions struct {
	RootCert string
	Key      string
	Cert     string
}