certificates

Documentation

Index

• Constants
• func FrontProxyCACreator() reconciling.NamedSecretCreatorGetter
• func GetCACreator(commonName string) reconciling.SecretCreator
• func GetClientCertificateCreator(name, commonName string, organizations []string, ...) reconciling.NamedSecretCreatorGetter
• func GetDexCACreator(dataCAKey string, getCA dexCAGetter) reconciling.SecretCreator
• func GetECDSACACertAndKey() (cert []byte, key []byte, err error)
• func GetECDSAClientCertificateCreator(name, commonName string, organizations []string, ...) reconciling.SecretCreator
• func GetSignedECDSACertAndKey(notAfter time.Duration, cfg certutil.Config, caCert *x509.Certificate, ...) (cert []byte, key []byte, err error)
• func RootCACreator(data caCreatorData) reconciling.NamedSecretCreatorGetter

Constants

const Duration365d = time.Hour * 24 * 365

Duration365d is a time.Duration that represents a year

Functions

func FrontProxyCACreator

func FrontProxyCACreator() reconciling.NamedSecretCreatorGetter

FrontProxyCACreator returns a function to create a secret with front proxy ca

func GetCACreator

func GetCACreator(commonName string) reconciling.SecretCreator

GetCACreator returns a function to create a secret containing a CA with the specified name

func GetClientCertificateCreator

func GetClientCertificateCreator(name, commonName string, organizations []string, dataCertKey, dataKeyKey string, getCA caGetter) reconciling.NamedSecretCreatorGetter

GetClientCertificateCreator is a generic function to return a secret generator to create a client certificate signed by the cluster CA

func GetDexCACreator

func GetDexCACreator(dataCAKey string, getCA dexCAGetter) reconciling.SecretCreator

GetDexCACreator returns a function to create a secret containing a CA bundle with the specified name

func GetECDSACACertAndKey

func GetECDSACACertAndKey() (cert []byte, key []byte, err error)

GetECDSACACertAndKey returns a pem-encoded ECDSA certificate and key

func GetECDSAClientCertificateCreator

func GetECDSAClientCertificateCreator(name, commonName string, organizations []string, dataCertKey, dataKeyKey string, getCA ecdsaCAGetter) reconciling.SecretCreator

GetECDSAClientCertificateCreator is a generic function to return a secret generator to create a client certificate signed by the cert returned by the passed getCA func. The resulting secret has no ownerRef

func GetSignedECDSACertAndKey

func GetSignedECDSACertAndKey(notAfter time.Duration, cfg certutil.Config, caCert *x509.Certificate, caKey *ecdsa.PrivateKey) (cert []byte, key []byte, err error)

GetSignedECDSACertAndKey creates and returns a signed ECDSA x509 certificate and key

func RootCACreator

func RootCACreator(data caCreatorData) reconciling.NamedSecretCreatorGetter

RootCACreator returns a function to create a secret with the root ca