v1alpha1

package
v0.32.0-rc.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Dec 3, 2024 License: Apache-2.0 Imports: 10 Imported by: 31

Documentation

Index

Constants

View Source 
const GroupName = "certificates.k8s.io"

GroupName is the group name use in this package

Variables

View Source 
var (
	ErrInvalidLengthGenerated        = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated          = fmt.Errorf("proto: integer overflow")
	ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
View Source 
var (
	// SchemeBuilder is the scheme builder with scheme init functions to run for this API package
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

	// AddToScheme is a global function that registers this API group & version to a scheme
	AddToScheme = localSchemeBuilder.AddToScheme
)
View Source 
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Kind 

func Kind(kind string) schema.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind

func Resource 

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type ClusterTrustBundle 

type ClusterTrustBundle struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// spec contains the signer (if any) and trust anchors.
	Spec ClusterTrustBundleSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
}

ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates).

ClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to.

It can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle.

func (*ClusterTrustBundle) APILifecycleDeprecated 

func (in *ClusterTrustBundle) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterTrustBundle) APILifecycleIntroduced 

func (in *ClusterTrustBundle) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterTrustBundle) APILifecycleRemoved 

func (in *ClusterTrustBundle) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterTrustBundle) DeepCopy 

func (in *ClusterTrustBundle) DeepCopy() *ClusterTrustBundle

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterTrustBundle.

func (*ClusterTrustBundle) DeepCopyInto 

func (in *ClusterTrustBundle) DeepCopyInto(out *ClusterTrustBundle)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterTrustBundle) DeepCopyObject 

func (in *ClusterTrustBundle) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterTrustBundle) Descriptor 

func (*ClusterTrustBundle) Descriptor() ([]byte, []int)

func (*ClusterTrustBundle) Marshal 

func (m *ClusterTrustBundle) Marshal() (dAtA []byte, err error)

func (*ClusterTrustBundle) MarshalTo 

func (m *ClusterTrustBundle) MarshalTo(dAtA []byte) (int, error)

func (*ClusterTrustBundle) MarshalToSizedBuffer 

func (m *ClusterTrustBundle) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterTrustBundle) ProtoMessage 

func (*ClusterTrustBundle) ProtoMessage()

func (*ClusterTrustBundle) Reset 

func (m *ClusterTrustBundle) Reset()

func (*ClusterTrustBundle) Size 

func (m *ClusterTrustBundle) Size() (n int)

func (*ClusterTrustBundle) String 

func (this *ClusterTrustBundle) String() string

func (ClusterTrustBundle) SwaggerDoc 

func (ClusterTrustBundle) SwaggerDoc() map[string]string

func (*ClusterTrustBundle) Unmarshal 

func (m *ClusterTrustBundle) Unmarshal(dAtA []byte) error

func (*ClusterTrustBundle) XXX_DiscardUnknown 

func (m *ClusterTrustBundle) XXX_DiscardUnknown()

func (*ClusterTrustBundle) XXX_Marshal 

func (m *ClusterTrustBundle) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterTrustBundle) XXX_Merge 

func (m *ClusterTrustBundle) XXX_Merge(src proto.Message)

func (*ClusterTrustBundle) XXX_Size 

func (m *ClusterTrustBundle) XXX_Size() int

func (*ClusterTrustBundle) XXX_Unmarshal 

func (m *ClusterTrustBundle) XXX_Unmarshal(b []byte) error

type ClusterTrustBundleList 

type ClusterTrustBundleList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata.
	//
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// items is a collection of ClusterTrustBundle objects
	Items []ClusterTrustBundle `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterTrustBundleList is a collection of ClusterTrustBundle objects

func (*ClusterTrustBundleList) APILifecycleDeprecated 

func (in *ClusterTrustBundleList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterTrustBundleList) APILifecycleIntroduced 

func (in *ClusterTrustBundleList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterTrustBundleList) APILifecycleRemoved 

func (in *ClusterTrustBundleList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterTrustBundleList) DeepCopy 

func (in *ClusterTrustBundleList) DeepCopy() *ClusterTrustBundleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterTrustBundleList.

func (*ClusterTrustBundleList) DeepCopyInto 

func (in *ClusterTrustBundleList) DeepCopyInto(out *ClusterTrustBundleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterTrustBundleList) DeepCopyObject 

func (in *ClusterTrustBundleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterTrustBundleList) Descriptor 

func (*ClusterTrustBundleList) Descriptor() ([]byte, []int)

func (*ClusterTrustBundleList) Marshal 

func (m *ClusterTrustBundleList) Marshal() (dAtA []byte, err error)

func (*ClusterTrustBundleList) MarshalTo 

func (m *ClusterTrustBundleList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterTrustBundleList) MarshalToSizedBuffer 

func (m *ClusterTrustBundleList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterTrustBundleList) ProtoMessage 

func (*ClusterTrustBundleList) ProtoMessage()

func (*ClusterTrustBundleList) Reset 

func (m *ClusterTrustBundleList) Reset()

func (*ClusterTrustBundleList) Size 

func (m *ClusterTrustBundleList) Size() (n int)

func (*ClusterTrustBundleList) String 

func (this *ClusterTrustBundleList) String() string

func (ClusterTrustBundleList) SwaggerDoc 

func (ClusterTrustBundleList) SwaggerDoc() map[string]string

func (*ClusterTrustBundleList) Unmarshal 

func (m *ClusterTrustBundleList) Unmarshal(dAtA []byte) error

func (*ClusterTrustBundleList) XXX_DiscardUnknown 

func (m *ClusterTrustBundleList) XXX_DiscardUnknown()

func (*ClusterTrustBundleList) XXX_Marshal 

func (m *ClusterTrustBundleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterTrustBundleList) XXX_Merge 

func (m *ClusterTrustBundleList) XXX_Merge(src proto.Message)

func (*ClusterTrustBundleList) XXX_Size 

func (m *ClusterTrustBundleList) XXX_Size() int

func (*ClusterTrustBundleList) XXX_Unmarshal 

func (m *ClusterTrustBundleList) XXX_Unmarshal(b []byte) error

type ClusterTrustBundleSpec 

type ClusterTrustBundleSpec struct {
	// signerName indicates the associated signer, if any.
	//
	// In order to create or update a ClusterTrustBundle that sets signerName,
	// you must have the following cluster-scoped permission:
	// group=certificates.k8s.io resource=signers resourceName=<the signer name>
	// verb=attest.
	//
	// If signerName is not empty, then the ClusterTrustBundle object must be
	// named with the signer name as a prefix (translating slashes to colons).
	// For example, for the signer name `example.com/foo`, valid
	// ClusterTrustBundle object names include `example.com:foo:abc` and
	// `example.com:foo:v1`.
	//
	// If signerName is empty, then the ClusterTrustBundle object's name must
	// not have such a prefix.
	//
	// List/watch requests for ClusterTrustBundles can filter on this field
	// using a `spec.signerName=NAME` field selector.
	//
	// +optional
	SignerName string `json:"signerName,omitempty" protobuf:"bytes,1,opt,name=signerName"`

	// trustBundle contains the individual X.509 trust anchors for this
	// bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates.
	//
	// The data must consist only of PEM certificate blocks that parse as valid
	// X.509 certificates.  Each certificate must include a basic constraints
	// extension with the CA bit set.  The API server will reject objects that
	// contain duplicate certificates, or that use PEM block headers.
	//
	// Users of ClusterTrustBundles, including Kubelet, are free to reorder and
	// deduplicate certificate blocks in this file according to their own logic,
	// as well as to drop PEM block headers and inter-block data.
	TrustBundle string `json:"trustBundle" protobuf:"bytes,2,opt,name=trustBundle"`
}

ClusterTrustBundleSpec contains the signer and trust anchors.

func (*ClusterTrustBundleSpec) DeepCopy 

func (in *ClusterTrustBundleSpec) DeepCopy() *ClusterTrustBundleSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterTrustBundleSpec.

func (*ClusterTrustBundleSpec) DeepCopyInto 

func (in *ClusterTrustBundleSpec) DeepCopyInto(out *ClusterTrustBundleSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterTrustBundleSpec) Descriptor 

func (*ClusterTrustBundleSpec) Descriptor() ([]byte, []int)

func (*ClusterTrustBundleSpec) Marshal 

func (m *ClusterTrustBundleSpec) Marshal() (dAtA []byte, err error)

func (*ClusterTrustBundleSpec) MarshalTo 

func (m *ClusterTrustBundleSpec) MarshalTo(dAtA []byte) (int, error)

func (*ClusterTrustBundleSpec) MarshalToSizedBuffer 

func (m *ClusterTrustBundleSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterTrustBundleSpec) ProtoMessage 

func (*ClusterTrustBundleSpec) ProtoMessage()

func (*ClusterTrustBundleSpec) Reset 

func (m *ClusterTrustBundleSpec) Reset()

func (*ClusterTrustBundleSpec) Size 

func (m *ClusterTrustBundleSpec) Size() (n int)

func (*ClusterTrustBundleSpec) String 

func (this *ClusterTrustBundleSpec) String() string

func (ClusterTrustBundleSpec) SwaggerDoc 

func (ClusterTrustBundleSpec) SwaggerDoc() map[string]string

func (*ClusterTrustBundleSpec) Unmarshal 

func (m *ClusterTrustBundleSpec) Unmarshal(dAtA []byte) error

func (*ClusterTrustBundleSpec) XXX_DiscardUnknown 

func (m *ClusterTrustBundleSpec) XXX_DiscardUnknown()

func (*ClusterTrustBundleSpec) XXX_Marshal 

func (m *ClusterTrustBundleSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterTrustBundleSpec) XXX_Merge 

func (m *ClusterTrustBundleSpec) XXX_Merge(src proto.Message)

func (*ClusterTrustBundleSpec) XXX_Size 

func (m *ClusterTrustBundleSpec) XXX_Size() int

func (*ClusterTrustBundleSpec) XXX_Unmarshal 

func (m *ClusterTrustBundleSpec) XXX_Unmarshal(b []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.