Documentation ¶
Index ¶
- Constants
- Variables
- func Kind(kind string) schema.GroupKind
- func Resource(resource string) schema.GroupResource
- type CertificateSigningRequest
- func (in *CertificateSigningRequest) APILifecycleDeprecated() (major, minor int)
- func (in *CertificateSigningRequest) APILifecycleIntroduced() (major, minor int)
- func (in *CertificateSigningRequest) APILifecycleRemoved() (major, minor int)
- func (in *CertificateSigningRequest) APILifecycleReplacement() schema.GroupVersionKind
- func (in *CertificateSigningRequest) DeepCopy() *CertificateSigningRequest
- func (in *CertificateSigningRequest) DeepCopyInto(out *CertificateSigningRequest)
- func (in *CertificateSigningRequest) DeepCopyObject() runtime.Object
- func (*CertificateSigningRequest) Descriptor() ([]byte, []int)
- func (m *CertificateSigningRequest) Marshal() (dAtA []byte, err error)
- func (m *CertificateSigningRequest) MarshalTo(dAtA []byte) (int, error)
- func (m *CertificateSigningRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*CertificateSigningRequest) ProtoMessage()
- func (m *CertificateSigningRequest) Reset()
- func (m *CertificateSigningRequest) Size() (n int)
- func (this *CertificateSigningRequest) String() string
- func (CertificateSigningRequest) SwaggerDoc() map[string]string
- func (m *CertificateSigningRequest) Unmarshal(dAtA []byte) error
- func (m *CertificateSigningRequest) XXX_DiscardUnknown()
- func (m *CertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *CertificateSigningRequest) XXX_Merge(src proto.Message)
- func (m *CertificateSigningRequest) XXX_Size() int
- func (m *CertificateSigningRequest) XXX_Unmarshal(b []byte) error
- type CertificateSigningRequestCondition
- func (in *CertificateSigningRequestCondition) DeepCopy() *CertificateSigningRequestCondition
- func (in *CertificateSigningRequestCondition) DeepCopyInto(out *CertificateSigningRequestCondition)
- func (*CertificateSigningRequestCondition) Descriptor() ([]byte, []int)
- func (m *CertificateSigningRequestCondition) Marshal() (dAtA []byte, err error)
- func (m *CertificateSigningRequestCondition) MarshalTo(dAtA []byte) (int, error)
- func (m *CertificateSigningRequestCondition) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*CertificateSigningRequestCondition) ProtoMessage()
- func (m *CertificateSigningRequestCondition) Reset()
- func (m *CertificateSigningRequestCondition) Size() (n int)
- func (this *CertificateSigningRequestCondition) String() string
- func (CertificateSigningRequestCondition) SwaggerDoc() map[string]string
- func (m *CertificateSigningRequestCondition) Unmarshal(dAtA []byte) error
- func (m *CertificateSigningRequestCondition) XXX_DiscardUnknown()
- func (m *CertificateSigningRequestCondition) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *CertificateSigningRequestCondition) XXX_Merge(src proto.Message)
- func (m *CertificateSigningRequestCondition) XXX_Size() int
- func (m *CertificateSigningRequestCondition) XXX_Unmarshal(b []byte) error
- type CertificateSigningRequestList
- func (in *CertificateSigningRequestList) APILifecycleDeprecated() (major, minor int)
- func (in *CertificateSigningRequestList) APILifecycleIntroduced() (major, minor int)
- func (in *CertificateSigningRequestList) APILifecycleRemoved() (major, minor int)
- func (in *CertificateSigningRequestList) APILifecycleReplacement() schema.GroupVersionKind
- func (in *CertificateSigningRequestList) DeepCopy() *CertificateSigningRequestList
- func (in *CertificateSigningRequestList) DeepCopyInto(out *CertificateSigningRequestList)
- func (in *CertificateSigningRequestList) DeepCopyObject() runtime.Object
- func (*CertificateSigningRequestList) Descriptor() ([]byte, []int)
- func (m *CertificateSigningRequestList) Marshal() (dAtA []byte, err error)
- func (m *CertificateSigningRequestList) MarshalTo(dAtA []byte) (int, error)
- func (m *CertificateSigningRequestList) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*CertificateSigningRequestList) ProtoMessage()
- func (m *CertificateSigningRequestList) Reset()
- func (m *CertificateSigningRequestList) Size() (n int)
- func (this *CertificateSigningRequestList) String() string
- func (m *CertificateSigningRequestList) Unmarshal(dAtA []byte) error
- func (m *CertificateSigningRequestList) XXX_DiscardUnknown()
- func (m *CertificateSigningRequestList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *CertificateSigningRequestList) XXX_Merge(src proto.Message)
- func (m *CertificateSigningRequestList) XXX_Size() int
- func (m *CertificateSigningRequestList) XXX_Unmarshal(b []byte) error
- type CertificateSigningRequestSpec
- func (in *CertificateSigningRequestSpec) DeepCopy() *CertificateSigningRequestSpec
- func (in *CertificateSigningRequestSpec) DeepCopyInto(out *CertificateSigningRequestSpec)
- func (*CertificateSigningRequestSpec) Descriptor() ([]byte, []int)
- func (m *CertificateSigningRequestSpec) Marshal() (dAtA []byte, err error)
- func (m *CertificateSigningRequestSpec) MarshalTo(dAtA []byte) (int, error)
- func (m *CertificateSigningRequestSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*CertificateSigningRequestSpec) ProtoMessage()
- func (m *CertificateSigningRequestSpec) Reset()
- func (m *CertificateSigningRequestSpec) Size() (n int)
- func (this *CertificateSigningRequestSpec) String() string
- func (CertificateSigningRequestSpec) SwaggerDoc() map[string]string
- func (m *CertificateSigningRequestSpec) Unmarshal(dAtA []byte) error
- func (m *CertificateSigningRequestSpec) XXX_DiscardUnknown()
- func (m *CertificateSigningRequestSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *CertificateSigningRequestSpec) XXX_Merge(src proto.Message)
- func (m *CertificateSigningRequestSpec) XXX_Size() int
- func (m *CertificateSigningRequestSpec) XXX_Unmarshal(b []byte) error
- type CertificateSigningRequestStatus
- func (in *CertificateSigningRequestStatus) DeepCopy() *CertificateSigningRequestStatus
- func (in *CertificateSigningRequestStatus) DeepCopyInto(out *CertificateSigningRequestStatus)
- func (*CertificateSigningRequestStatus) Descriptor() ([]byte, []int)
- func (m *CertificateSigningRequestStatus) Marshal() (dAtA []byte, err error)
- func (m *CertificateSigningRequestStatus) MarshalTo(dAtA []byte) (int, error)
- func (m *CertificateSigningRequestStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*CertificateSigningRequestStatus) ProtoMessage()
- func (m *CertificateSigningRequestStatus) Reset()
- func (m *CertificateSigningRequestStatus) Size() (n int)
- func (this *CertificateSigningRequestStatus) String() string
- func (CertificateSigningRequestStatus) SwaggerDoc() map[string]string
- func (m *CertificateSigningRequestStatus) Unmarshal(dAtA []byte) error
- func (m *CertificateSigningRequestStatus) XXX_DiscardUnknown()
- func (m *CertificateSigningRequestStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *CertificateSigningRequestStatus) XXX_Merge(src proto.Message)
- func (m *CertificateSigningRequestStatus) XXX_Size() int
- func (m *CertificateSigningRequestStatus) XXX_Unmarshal(b []byte) error
- type ExtraValue
- func (in ExtraValue) DeepCopy() ExtraValue
- func (in ExtraValue) DeepCopyInto(out *ExtraValue)
- func (*ExtraValue) Descriptor() ([]byte, []int)
- func (m ExtraValue) Marshal() (dAtA []byte, err error)
- func (m ExtraValue) MarshalTo(dAtA []byte) (int, error)
- func (m ExtraValue) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*ExtraValue) ProtoMessage()
- func (m *ExtraValue) Reset()
- func (m ExtraValue) Size() (n int)
- func (t ExtraValue) String() string
- func (m *ExtraValue) Unmarshal(dAtA []byte) error
- func (m *ExtraValue) XXX_DiscardUnknown()
- func (m *ExtraValue) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *ExtraValue) XXX_Merge(src proto.Message)
- func (m *ExtraValue) XXX_Size() int
- func (m *ExtraValue) XXX_Unmarshal(b []byte) error
- type KeyUsage
- type RequestConditionType
Constants ¶
const ( // Signs certificates that will be honored as client-certs by the // kube-apiserver. Never auto-approved by kube-controller-manager. KubeAPIServerClientSignerName = "kubernetes.io/kube-apiserver-client" // Signs client certificates that will be honored as client-certs by the // kube-apiserver for a kubelet. // May be auto-approved by kube-controller-manager. KubeAPIServerClientKubeletSignerName = "kubernetes.io/kube-apiserver-client-kubelet" // Signs serving certificates that are honored as a valid kubelet serving // certificate by the kube-apiserver, but has no other guarantees. KubeletServingSignerName = "kubernetes.io/kubelet-serving" // Has no guarantees for trust at all. Some distributions may honor these // as client certs, but that behavior is not standard kubernetes behavior. LegacyUnknownSignerName = "kubernetes.io/legacy-unknown" )
Built in signerName values that are honoured by kube-controller-manager. None of these usages are related to ServiceAccount token secrets `.data[ca.crt]` in any way.
const GroupName = "certificates.k8s.io"
GroupName is the group name use in this package
Variables ¶
var ( ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow") ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group") )
var ( // TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api. // localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes. SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes) AddToScheme = localSchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type CertificateSigningRequest ¶
type CertificateSigningRequest struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // spec contains the certificate request, and is immutable after creation. // Only the request, signerName, expirationSeconds, and usages fields can be set on creation. // Other fields are derived by Kubernetes and cannot be modified by users. Spec CertificateSigningRequestSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Derived information about the request. // +optional Status CertificateSigningRequestStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
Describes a certificate signing request
func (*CertificateSigningRequest) APILifecycleDeprecated ¶ added in v0.19.0
func (in *CertificateSigningRequest) APILifecycleDeprecated() (major, minor int)
APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.
func (*CertificateSigningRequest) APILifecycleIntroduced ¶ added in v0.19.0
func (in *CertificateSigningRequest) APILifecycleIntroduced() (major, minor int)
APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.
func (*CertificateSigningRequest) APILifecycleRemoved ¶ added in v0.19.0
func (in *CertificateSigningRequest) APILifecycleRemoved() (major, minor int)
APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.
func (*CertificateSigningRequest) APILifecycleReplacement ¶ added in v0.19.0
func (in *CertificateSigningRequest) APILifecycleReplacement() schema.GroupVersionKind
APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.
func (*CertificateSigningRequest) DeepCopy ¶
func (in *CertificateSigningRequest) DeepCopy() *CertificateSigningRequest
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequest.
func (*CertificateSigningRequest) DeepCopyInto ¶
func (in *CertificateSigningRequest) DeepCopyInto(out *CertificateSigningRequest)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*CertificateSigningRequest) DeepCopyObject ¶
func (in *CertificateSigningRequest) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*CertificateSigningRequest) Descriptor ¶
func (*CertificateSigningRequest) Descriptor() ([]byte, []int)
func (*CertificateSigningRequest) Marshal ¶
func (m *CertificateSigningRequest) Marshal() (dAtA []byte, err error)
func (*CertificateSigningRequest) MarshalTo ¶
func (m *CertificateSigningRequest) MarshalTo(dAtA []byte) (int, error)
func (*CertificateSigningRequest) MarshalToSizedBuffer ¶ added in v0.16.4
func (m *CertificateSigningRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*CertificateSigningRequest) ProtoMessage ¶
func (*CertificateSigningRequest) ProtoMessage()
func (*CertificateSigningRequest) Reset ¶
func (m *CertificateSigningRequest) Reset()
func (*CertificateSigningRequest) Size ¶
func (m *CertificateSigningRequest) Size() (n int)
func (*CertificateSigningRequest) String ¶
func (this *CertificateSigningRequest) String() string
func (CertificateSigningRequest) SwaggerDoc ¶
func (CertificateSigningRequest) SwaggerDoc() map[string]string
func (*CertificateSigningRequest) Unmarshal ¶
func (m *CertificateSigningRequest) Unmarshal(dAtA []byte) error
func (*CertificateSigningRequest) XXX_DiscardUnknown ¶ added in v0.16.4
func (m *CertificateSigningRequest) XXX_DiscardUnknown()
func (*CertificateSigningRequest) XXX_Marshal ¶ added in v0.16.4
func (m *CertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*CertificateSigningRequest) XXX_Merge ¶ added in v0.16.4
func (m *CertificateSigningRequest) XXX_Merge(src proto.Message)
func (*CertificateSigningRequest) XXX_Size ¶ added in v0.16.4
func (m *CertificateSigningRequest) XXX_Size() int
func (*CertificateSigningRequest) XXX_Unmarshal ¶ added in v0.16.4
func (m *CertificateSigningRequest) XXX_Unmarshal(b []byte) error
type CertificateSigningRequestCondition ¶
type CertificateSigningRequestCondition struct { // type of the condition. Known conditions include "Approved", "Denied", and "Failed". Type RequestConditionType `json:"type" protobuf:"bytes,1,opt,name=type,casttype=RequestConditionType"` // Status of the condition, one of True, False, Unknown. // Approved, Denied, and Failed conditions may not be "False" or "Unknown". // Defaults to "True". // If unset, should be treated as "True". // +optional Status v1.ConditionStatus `json:"status" protobuf:"bytes,6,opt,name=status,casttype=k8s.io/api/core/v1.ConditionStatus"` // brief reason for the request state // +optional Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"` // human readable message with details about the request state // +optional Message string `json:"message,omitempty" protobuf:"bytes,3,opt,name=message"` // timestamp for the last update to this condition // +optional LastUpdateTime metav1.Time `json:"lastUpdateTime,omitempty" protobuf:"bytes,4,opt,name=lastUpdateTime"` // lastTransitionTime is the time the condition last transitioned from one status to another. // If unset, when a new condition type is added or an existing condition's status is changed, // the server defaults this to the current time. // +optional LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty" protobuf:"bytes,5,opt,name=lastTransitionTime"` }
func (*CertificateSigningRequestCondition) DeepCopy ¶
func (in *CertificateSigningRequestCondition) DeepCopy() *CertificateSigningRequestCondition
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestCondition.
func (*CertificateSigningRequestCondition) DeepCopyInto ¶
func (in *CertificateSigningRequestCondition) DeepCopyInto(out *CertificateSigningRequestCondition)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*CertificateSigningRequestCondition) Descriptor ¶
func (*CertificateSigningRequestCondition) Descriptor() ([]byte, []int)
func (*CertificateSigningRequestCondition) Marshal ¶
func (m *CertificateSigningRequestCondition) Marshal() (dAtA []byte, err error)
func (*CertificateSigningRequestCondition) MarshalTo ¶
func (m *CertificateSigningRequestCondition) MarshalTo(dAtA []byte) (int, error)
func (*CertificateSigningRequestCondition) MarshalToSizedBuffer ¶ added in v0.16.4
func (m *CertificateSigningRequestCondition) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*CertificateSigningRequestCondition) ProtoMessage ¶
func (*CertificateSigningRequestCondition) ProtoMessage()
func (*CertificateSigningRequestCondition) Reset ¶
func (m *CertificateSigningRequestCondition) Reset()
func (*CertificateSigningRequestCondition) Size ¶
func (m *CertificateSigningRequestCondition) Size() (n int)
func (*CertificateSigningRequestCondition) String ¶
func (this *CertificateSigningRequestCondition) String() string
func (CertificateSigningRequestCondition) SwaggerDoc ¶
func (CertificateSigningRequestCondition) SwaggerDoc() map[string]string
func (*CertificateSigningRequestCondition) Unmarshal ¶
func (m *CertificateSigningRequestCondition) Unmarshal(dAtA []byte) error
func (*CertificateSigningRequestCondition) XXX_DiscardUnknown ¶ added in v0.16.4
func (m *CertificateSigningRequestCondition) XXX_DiscardUnknown()
func (*CertificateSigningRequestCondition) XXX_Marshal ¶ added in v0.16.4
func (m *CertificateSigningRequestCondition) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*CertificateSigningRequestCondition) XXX_Merge ¶ added in v0.16.4
func (m *CertificateSigningRequestCondition) XXX_Merge(src proto.Message)
func (*CertificateSigningRequestCondition) XXX_Size ¶ added in v0.16.4
func (m *CertificateSigningRequestCondition) XXX_Size() int
func (*CertificateSigningRequestCondition) XXX_Unmarshal ¶ added in v0.16.4
func (m *CertificateSigningRequestCondition) XXX_Unmarshal(b []byte) error
type CertificateSigningRequestList ¶
type CertificateSigningRequestList struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` Items []CertificateSigningRequest `json:"items" protobuf:"bytes,2,rep,name=items"` }
func (*CertificateSigningRequestList) APILifecycleDeprecated ¶ added in v0.19.0
func (in *CertificateSigningRequestList) APILifecycleDeprecated() (major, minor int)
APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.
func (*CertificateSigningRequestList) APILifecycleIntroduced ¶ added in v0.19.0
func (in *CertificateSigningRequestList) APILifecycleIntroduced() (major, minor int)
APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.
func (*CertificateSigningRequestList) APILifecycleRemoved ¶ added in v0.19.0
func (in *CertificateSigningRequestList) APILifecycleRemoved() (major, minor int)
APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.
func (*CertificateSigningRequestList) APILifecycleReplacement ¶ added in v0.19.0
func (in *CertificateSigningRequestList) APILifecycleReplacement() schema.GroupVersionKind
APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.
func (*CertificateSigningRequestList) DeepCopy ¶
func (in *CertificateSigningRequestList) DeepCopy() *CertificateSigningRequestList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestList.
func (*CertificateSigningRequestList) DeepCopyInto ¶
func (in *CertificateSigningRequestList) DeepCopyInto(out *CertificateSigningRequestList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*CertificateSigningRequestList) DeepCopyObject ¶
func (in *CertificateSigningRequestList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*CertificateSigningRequestList) Descriptor ¶
func (*CertificateSigningRequestList) Descriptor() ([]byte, []int)
func (*CertificateSigningRequestList) Marshal ¶
func (m *CertificateSigningRequestList) Marshal() (dAtA []byte, err error)
func (*CertificateSigningRequestList) MarshalTo ¶
func (m *CertificateSigningRequestList) MarshalTo(dAtA []byte) (int, error)
func (*CertificateSigningRequestList) MarshalToSizedBuffer ¶ added in v0.16.4
func (m *CertificateSigningRequestList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*CertificateSigningRequestList) ProtoMessage ¶
func (*CertificateSigningRequestList) ProtoMessage()
func (*CertificateSigningRequestList) Reset ¶
func (m *CertificateSigningRequestList) Reset()
func (*CertificateSigningRequestList) Size ¶
func (m *CertificateSigningRequestList) Size() (n int)
func (*CertificateSigningRequestList) String ¶
func (this *CertificateSigningRequestList) String() string
func (*CertificateSigningRequestList) Unmarshal ¶
func (m *CertificateSigningRequestList) Unmarshal(dAtA []byte) error
func (*CertificateSigningRequestList) XXX_DiscardUnknown ¶ added in v0.16.4
func (m *CertificateSigningRequestList) XXX_DiscardUnknown()
func (*CertificateSigningRequestList) XXX_Marshal ¶ added in v0.16.4
func (m *CertificateSigningRequestList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*CertificateSigningRequestList) XXX_Merge ¶ added in v0.16.4
func (m *CertificateSigningRequestList) XXX_Merge(src proto.Message)
func (*CertificateSigningRequestList) XXX_Size ¶ added in v0.16.4
func (m *CertificateSigningRequestList) XXX_Size() int
func (*CertificateSigningRequestList) XXX_Unmarshal ¶ added in v0.16.4
func (m *CertificateSigningRequestList) XXX_Unmarshal(b []byte) error
type CertificateSigningRequestSpec ¶
type CertificateSigningRequestSpec struct { // Base64-encoded PKCS#10 CSR data // +listType=atomic Request []byte `json:"request" protobuf:"bytes,1,opt,name=request"` // Requested signer for the request. It is a qualified name in the form: // `scope-hostname.io/name`. // If empty, it will be defaulted: // 1. If it's a kubelet client certificate, it is assigned // "kubernetes.io/kube-apiserver-client-kubelet". // 2. If it's a kubelet serving certificate, it is assigned // "kubernetes.io/kubelet-serving". // 3. Otherwise, it is assigned "kubernetes.io/legacy-unknown". // Distribution of trust for signers happens out of band. // You can select on this field using `spec.signerName`. // +optional SignerName *string `json:"signerName,omitempty" protobuf:"bytes,7,opt,name=signerName"` // expirationSeconds is the requested duration of validity of the issued // certificate. The certificate signer may issue a certificate with a different // validity duration so a client must check the delta between the notBefore and // and notAfter fields in the issued certificate to determine the actual duration. // // The v1.22+ in-tree implementations of the well-known Kubernetes signers will // honor this field as long as the requested duration is not greater than the // maximum duration they will honor per the --cluster-signing-duration CLI // flag to the Kubernetes controller manager. // // Certificate signers may not honor this field for various reasons: // // 1. Old signer that is unaware of the field (such as the in-tree // implementations prior to v1.22) // 2. Signer whose configured maximum is shorter than the requested duration // 3. Signer whose configured minimum is longer than the requested duration // // The minimum valid value for expirationSeconds is 600, i.e. 10 minutes. // // As of v1.22, this field is beta and is controlled via the CSRDuration feature gate. // // +optional ExpirationSeconds *int32 `json:"expirationSeconds,omitempty" protobuf:"varint,8,opt,name=expirationSeconds"` // allowedUsages specifies a set of usage contexts the key will be // valid for. // See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3 // https://tools.ietf.org/html/rfc5280#section-4.2.1.12 // Valid values are: // "signing", // "digital signature", // "content commitment", // "key encipherment", // "key agreement", // "data encipherment", // "cert sign", // "crl sign", // "encipher only", // "decipher only", // "any", // "server auth", // "client auth", // "code signing", // "email protection", // "s/mime", // "ipsec end system", // "ipsec tunnel", // "ipsec user", // "timestamping", // "ocsp signing", // "microsoft sgc", // "netscape sgc" // +listType=atomic Usages []KeyUsage `json:"usages,omitempty" protobuf:"bytes,5,opt,name=usages"` // Information about the requesting user. // See user.Info interface for details. // +optional Username string `json:"username,omitempty" protobuf:"bytes,2,opt,name=username"` // UID information about the requesting user. // See user.Info interface for details. // +optional UID string `json:"uid,omitempty" protobuf:"bytes,3,opt,name=uid"` // Group information about the requesting user. // See user.Info interface for details. // +listType=atomic // +optional Groups []string `json:"groups,omitempty" protobuf:"bytes,4,rep,name=groups"` // Extra information about the requesting user. // See user.Info interface for details. // +optional Extra map[string]ExtraValue `json:"extra,omitempty" protobuf:"bytes,6,rep,name=extra"` }
CertificateSigningRequestSpec contains the certificate request.
func (*CertificateSigningRequestSpec) DeepCopy ¶
func (in *CertificateSigningRequestSpec) DeepCopy() *CertificateSigningRequestSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestSpec.
func (*CertificateSigningRequestSpec) DeepCopyInto ¶
func (in *CertificateSigningRequestSpec) DeepCopyInto(out *CertificateSigningRequestSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*CertificateSigningRequestSpec) Descriptor ¶
func (*CertificateSigningRequestSpec) Descriptor() ([]byte, []int)
func (*CertificateSigningRequestSpec) Marshal ¶
func (m *CertificateSigningRequestSpec) Marshal() (dAtA []byte, err error)
func (*CertificateSigningRequestSpec) MarshalTo ¶
func (m *CertificateSigningRequestSpec) MarshalTo(dAtA []byte) (int, error)
func (*CertificateSigningRequestSpec) MarshalToSizedBuffer ¶ added in v0.16.4
func (m *CertificateSigningRequestSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*CertificateSigningRequestSpec) ProtoMessage ¶
func (*CertificateSigningRequestSpec) ProtoMessage()
func (*CertificateSigningRequestSpec) Reset ¶
func (m *CertificateSigningRequestSpec) Reset()
func (*CertificateSigningRequestSpec) Size ¶
func (m *CertificateSigningRequestSpec) Size() (n int)
func (*CertificateSigningRequestSpec) String ¶
func (this *CertificateSigningRequestSpec) String() string
func (CertificateSigningRequestSpec) SwaggerDoc ¶
func (CertificateSigningRequestSpec) SwaggerDoc() map[string]string
func (*CertificateSigningRequestSpec) Unmarshal ¶
func (m *CertificateSigningRequestSpec) Unmarshal(dAtA []byte) error
func (*CertificateSigningRequestSpec) XXX_DiscardUnknown ¶ added in v0.16.4
func (m *CertificateSigningRequestSpec) XXX_DiscardUnknown()
func (*CertificateSigningRequestSpec) XXX_Marshal ¶ added in v0.16.4
func (m *CertificateSigningRequestSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*CertificateSigningRequestSpec) XXX_Merge ¶ added in v0.16.4
func (m *CertificateSigningRequestSpec) XXX_Merge(src proto.Message)
func (*CertificateSigningRequestSpec) XXX_Size ¶ added in v0.16.4
func (m *CertificateSigningRequestSpec) XXX_Size() int
func (*CertificateSigningRequestSpec) XXX_Unmarshal ¶ added in v0.16.4
func (m *CertificateSigningRequestSpec) XXX_Unmarshal(b []byte) error
type CertificateSigningRequestStatus ¶
type CertificateSigningRequestStatus struct { // Conditions applied to the request, such as approval or denial. // +listType=map // +listMapKey=type // +optional Conditions []CertificateSigningRequestCondition `json:"conditions,omitempty" protobuf:"bytes,1,rep,name=conditions"` // If request was approved, the controller will place the issued certificate here. // +listType=atomic // +optional Certificate []byte `json:"certificate,omitempty" protobuf:"bytes,2,opt,name=certificate"` }
func (*CertificateSigningRequestStatus) DeepCopy ¶
func (in *CertificateSigningRequestStatus) DeepCopy() *CertificateSigningRequestStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestStatus.
func (*CertificateSigningRequestStatus) DeepCopyInto ¶
func (in *CertificateSigningRequestStatus) DeepCopyInto(out *CertificateSigningRequestStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*CertificateSigningRequestStatus) Descriptor ¶
func (*CertificateSigningRequestStatus) Descriptor() ([]byte, []int)
func (*CertificateSigningRequestStatus) Marshal ¶
func (m *CertificateSigningRequestStatus) Marshal() (dAtA []byte, err error)
func (*CertificateSigningRequestStatus) MarshalTo ¶
func (m *CertificateSigningRequestStatus) MarshalTo(dAtA []byte) (int, error)
func (*CertificateSigningRequestStatus) MarshalToSizedBuffer ¶ added in v0.16.4
func (m *CertificateSigningRequestStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*CertificateSigningRequestStatus) ProtoMessage ¶
func (*CertificateSigningRequestStatus) ProtoMessage()
func (*CertificateSigningRequestStatus) Reset ¶
func (m *CertificateSigningRequestStatus) Reset()
func (*CertificateSigningRequestStatus) Size ¶
func (m *CertificateSigningRequestStatus) Size() (n int)
func (*CertificateSigningRequestStatus) String ¶
func (this *CertificateSigningRequestStatus) String() string
func (CertificateSigningRequestStatus) SwaggerDoc ¶
func (CertificateSigningRequestStatus) SwaggerDoc() map[string]string
func (*CertificateSigningRequestStatus) Unmarshal ¶
func (m *CertificateSigningRequestStatus) Unmarshal(dAtA []byte) error
func (*CertificateSigningRequestStatus) XXX_DiscardUnknown ¶ added in v0.16.4
func (m *CertificateSigningRequestStatus) XXX_DiscardUnknown()
func (*CertificateSigningRequestStatus) XXX_Marshal ¶ added in v0.16.4
func (m *CertificateSigningRequestStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*CertificateSigningRequestStatus) XXX_Merge ¶ added in v0.16.4
func (m *CertificateSigningRequestStatus) XXX_Merge(src proto.Message)
func (*CertificateSigningRequestStatus) XXX_Size ¶ added in v0.16.4
func (m *CertificateSigningRequestStatus) XXX_Size() int
func (*CertificateSigningRequestStatus) XXX_Unmarshal ¶ added in v0.16.4
func (m *CertificateSigningRequestStatus) XXX_Unmarshal(b []byte) error
type ExtraValue ¶
type ExtraValue []string
ExtraValue masks the value so protobuf can generate +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false
func (ExtraValue) DeepCopy ¶
func (in ExtraValue) DeepCopy() ExtraValue
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExtraValue.
func (ExtraValue) DeepCopyInto ¶
func (in ExtraValue) DeepCopyInto(out *ExtraValue)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ExtraValue) Descriptor ¶
func (*ExtraValue) Descriptor() ([]byte, []int)
func (ExtraValue) Marshal ¶
func (m ExtraValue) Marshal() (dAtA []byte, err error)
func (ExtraValue) MarshalToSizedBuffer ¶ added in v0.16.4
func (m ExtraValue) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ExtraValue) ProtoMessage ¶
func (*ExtraValue) ProtoMessage()
func (*ExtraValue) Reset ¶
func (m *ExtraValue) Reset()
func (ExtraValue) Size ¶
func (m ExtraValue) Size() (n int)
func (ExtraValue) String ¶
func (t ExtraValue) String() string
func (*ExtraValue) Unmarshal ¶
func (m *ExtraValue) Unmarshal(dAtA []byte) error
func (*ExtraValue) XXX_DiscardUnknown ¶ added in v0.16.4
func (m *ExtraValue) XXX_DiscardUnknown()
func (*ExtraValue) XXX_Marshal ¶ added in v0.16.4
func (m *ExtraValue) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*ExtraValue) XXX_Merge ¶ added in v0.16.4
func (m *ExtraValue) XXX_Merge(src proto.Message)
func (*ExtraValue) XXX_Size ¶ added in v0.16.4
func (m *ExtraValue) XXX_Size() int
func (*ExtraValue) XXX_Unmarshal ¶ added in v0.16.4
func (m *ExtraValue) XXX_Unmarshal(b []byte) error
type KeyUsage ¶
type KeyUsage string
KeyUsages specifies valid usage contexts for keys. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3
https://tools.ietf.org/html/rfc5280#section-4.2.1.12
const ( UsageSigning KeyUsage = "signing" UsageDigitalSignature KeyUsage = "digital signature" UsageContentCommitment KeyUsage = "content commitment" UsageKeyEncipherment KeyUsage = "key encipherment" UsageKeyAgreement KeyUsage = "key agreement" UsageDataEncipherment KeyUsage = "data encipherment" UsageCertSign KeyUsage = "cert sign" UsageCRLSign KeyUsage = "crl sign" UsageEncipherOnly KeyUsage = "encipher only" UsageDecipherOnly KeyUsage = "decipher only" UsageAny KeyUsage = "any" UsageServerAuth KeyUsage = "server auth" UsageClientAuth KeyUsage = "client auth" UsageCodeSigning KeyUsage = "code signing" UsageEmailProtection KeyUsage = "email protection" UsageSMIME KeyUsage = "s/mime" UsageIPsecEndSystem KeyUsage = "ipsec end system" UsageIPsecTunnel KeyUsage = "ipsec tunnel" UsageIPsecUser KeyUsage = "ipsec user" UsageTimestamping KeyUsage = "timestamping" UsageOCSPSigning KeyUsage = "ocsp signing" UsageMicrosoftSGC KeyUsage = "microsoft sgc" UsageNetscapeSGC KeyUsage = "netscape sgc" )
type RequestConditionType ¶
type RequestConditionType string
const ( CertificateApproved RequestConditionType = "Approved" CertificateDenied RequestConditionType = "Denied" CertificateFailed RequestConditionType = "Failed" )
These are the possible conditions for a certificate request.