certificate

Documentation

Index

• Constants
• func CAKeyPair(config *configupload.Configuration) (*rsa.PrivateKey, *x509.Certificate, error)
• func DownloadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, _ executor.Interface) error
• func EncodePublicKeyPEM(key *rsa.PublicKey) ([]byte, error)
• func GetCertificateSANs(host string, alternativeNames []string) []string
• func NewPrivateKey() (*rsa.PrivateKey, error)
• func NewSignedCert(cfg *certutil.Config, key crypto.Signer, caCert *x509.Certificate, ...) (*x509.Certificate, error)
• func NewSignedKubernetesServiceTLSCert(name, namespace, domain string, caKey crypto.Signer, caCert *x509.Certificate) (map[string]string, error)
• func UploadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, _ executor.Interface) error

Constants

const (
	KubernetesCACertPath = "/etc/kubernetes/pki/ca.crt"
	KubernetesCAKeyPath  = "/etc/kubernetes/pki/ca.key"
)

const (
	// PrivateKeyBlockType is a possible value for pem.Block.Type.
	PrivateKeyBlockType = "PRIVATE KEY"
	// PublicKeyBlockType is a possible value for pem.Block.Type.
	PublicKeyBlockType = "PUBLIC KEY"
	// CertificateBlockType is a possible value for pem.Block.Type.
	CertificateBlockType = "CERTIFICATE"
	// RSAPrivateKeyBlockType is a possible value for pem.Block.Type.
	RSAPrivateKeyBlockType = "RSA PRIVATE KEY"
)

Functions

func CAKeyPair

func CAKeyPair(config *configupload.Configuration) (*rsa.PrivateKey, *x509.Certificate, error)

CAKeyPair parses generated PKI CA certificate and key

func DownloadKubePKI

func DownloadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, _ executor.Interface) error

func EncodePublicKeyPEM

func EncodePublicKeyPEM(key *rsa.PublicKey) ([]byte, error)

EncodePublicKeyPEM returns PEM-encoded public data

func GetCertificateSANs

func GetCertificateSANs(host string, alternativeNames []string) []string

GetCertificateSANs combines host name and subject alternative names into a list of SANs after transformation

func NewPrivateKey

func NewPrivateKey() (*rsa.PrivateKey, error)

NewPrivateKey creates an RSA private key

func NewSignedCert

func NewSignedCert(cfg *certutil.Config, key crypto.Signer, caCert *x509.Certificate, caKey crypto.Signer, notAfter time.Time) (*x509.Certificate, error)

NewSignedCert creates a signed certificate using the given CA certificate and key

func NewSignedKubernetesServiceTLSCert

func NewSignedKubernetesServiceTLSCert(name, namespace, domain string, caKey crypto.Signer, caCert *x509.Certificate) (map[string]string, error)

func UploadKubePKI

func UploadKubePKI(s *state.State, _ *kubeoneapi.HostConfig, _ executor.Interface) error