certificate

Documentation

Index

• Constants
• func CAKeyPair(config *configupload.Configuration) (*rsa.PrivateKey, *x509.Certificate, error)
• func DownloadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, conn executor.Interface) error
• func EncodePublicKeyPEM(key *rsa.PublicKey) ([]byte, error)
• func GetCertificateSANs(host string, alternativeNames []string) []string
• func NewSignedTLSCert(name, namespace, domain string, caKey crypto.Signer, caCert *x509.Certificate) (map[string]string, error)
• func UploadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, conn executor.Interface) error

Constants

const (
	KubernetesCACertPath = "/etc/kubernetes/pki/ca.crt"
	KubernetesCAKeyPath  = "/etc/kubernetes/pki/ca.key"
)

const (
	// PrivateKeyBlockType is a possible value for pem.Block.Type.
	PrivateKeyBlockType = "PRIVATE KEY"
	// PublicKeyBlockType is a possible value for pem.Block.Type.
	PublicKeyBlockType = "PUBLIC KEY"
	// CertificateBlockType is a possible value for pem.Block.Type.
	CertificateBlockType = "CERTIFICATE"
	// RSAPrivateKeyBlockType is a possible value for pem.Block.Type.
	RSAPrivateKeyBlockType = "RSA PRIVATE KEY"
)

Functions

func CAKeyPair

func CAKeyPair(config *configupload.Configuration) (*rsa.PrivateKey, *x509.Certificate, error)

CAKeyPair parses generated PKI CA certificate and key

func DownloadKubePKI

func DownloadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, conn executor.Interface) error

func EncodePublicKeyPEM

func EncodePublicKeyPEM(key *rsa.PublicKey) ([]byte, error)

EncodePublicKeyPEM returns PEM-encoded public data

func GetCertificateSANs

func GetCertificateSANs(host string, alternativeNames []string) []string

GetCertificateSANs combines host name and subject alternative names into a list of SANs after transformation

func NewSignedTLSCert

func NewSignedTLSCert(name, namespace, domain string, caKey crypto.Signer, caCert *x509.Certificate) (map[string]string, error)

func UploadKubePKI

func UploadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, conn executor.Interface) error