providers

Documentation

Index

• Constants
• Variables
• func NewCAProvider(c client.Client, opts IssuerOptions, ref api.ObjectRef, obj client.Object) (lib.CAProvider, error)
• func NewVault(c client.Reader, opts IssuerOptions) (lib.CAProvider, error)
• type AcmeStagingProvider
  • func (a AcmeStagingProvider) GetCAs(_ client.Object, _ string) ([]*x509.Certificate, error)
• type IssuerOptions
  • func (o IssuerOptions) ResourceNamespace(iss cmapi.GenericIssuer) string
• type IssuerProvider
  • func (c *IssuerProvider) GetCAs(obj client.Object, _ string) ([]*x509.Certificate, error)
• type SecretProvider
  • func (c *SecretProvider) GetCAs(obj client.Object, key string) ([]*x509.Certificate, error)
• type VaultProvider
  • func (v *VaultProvider) GetCAs(obj client.Object, _ string) ([]*x509.Certificate, error)

Constants

const LEStagingServerURL = "https://acme-staging-v02.api.letsencrypt.org/directory"

Variables

var (

	// curl -L https://letsencrypt.org/certs/staging/letsencrypt-stg-root-x1.pem
	LEStagingRootX1 string

	// curl -L https://letsencrypt.org/certs/staging/letsencrypt-stg-root-x2.pem
	LEStagingRootX2 string
)

var DefaultAcmeStagingProvider = func() lib.CAProvider {
	var certs []*x509.Certificate
	if LEStagingRootX1 != "" {
		caCerts, _, err := cert.ParseRootCAs([]byte(LEStagingRootX1))
		if err != nil {
			panic(errors.Wrap(err, "failed to parse LEStagingRootX1"))
		}
		certs = append(certs, caCerts...)
	}
	if LEStagingRootX2 != "" {
		caCerts, _, err := cert.ParseRootCAs([]byte(LEStagingRootX2))
		if err != nil {
			panic(errors.Wrap(err, "failed to parse LEStagingRootX2"))
		}
		certs = append(certs, caCerts...)
	}
	return AcmeStagingProvider{certs: certs}
}()

Functions

func NewCAProvider

func NewCAProvider(c client.Client, opts IssuerOptions, ref api.ObjectRef, obj client.Object) (lib.CAProvider, error)

func NewVault

func NewVault(c client.Reader, opts IssuerOptions) (lib.CAProvider, error)

Types

type AcmeStagingProvider

type AcmeStagingProvider struct {
	// contains filtered or unexported fields
}

func (AcmeStagingProvider) GetCAs

func (a AcmeStagingProvider) GetCAs(_ client.Object, _ string) ([]*x509.Certificate, error)

type IssuerOptions

type IssuerOptions struct {
	// ClusterResourceNamespace is the namespace to store resources created by
	// non-namespaced resources (e.g. ClusterIssuer) in.
	ClusterResourceNamespace string
}

func (IssuerOptions) ResourceNamespace

func (o IssuerOptions) ResourceNamespace(iss cmapi.GenericIssuer) string

type IssuerProvider

type IssuerProvider struct {
	Reader client.Reader
}

func (*IssuerProvider) GetCAs

func (c *IssuerProvider) GetCAs(obj client.Object, _ string) ([]*x509.Certificate, error)

type SecretProvider

type SecretProvider struct{}

func (*SecretProvider) GetCAs

func (c *SecretProvider) GetCAs(obj client.Object, key string) ([]*x509.Certificate, error)

type VaultProvider

type VaultProvider struct {
	// contains filtered or unexported fields
}

func (*VaultProvider) GetCAs

func (v *VaultProvider) GetCAs(obj client.Object, _ string) ([]*x509.Certificate, error)