cert

Documentation

Index

• type CertificateConfig
• type CertificateDefinition
  • func CreateCertificateDefinitions(args *FactoryArgs) []CertificateDefinition
• type FactoryArgs

Types

type CertificateConfig

type CertificateConfig struct {
	Lifetime time.Duration
	Refresh  time.Duration
}

CertificateConfig contains cert configuration data

type CertificateDefinition

type CertificateDefinition struct {
	// configurable by user
	Configurable bool

	// current CA key/cert
	SignerSecret *corev1.Secret
	SignerConfig CertificateConfig

	// all valid CA certs
	CertBundleConfigmap *corev1.ConfigMap

	// current key/cert for target
	TargetSecret *corev1.Secret
	TargetConfig CertificateConfig

	// only one of the following should be set
	// contains target key/cert for server
	TargetService *string
	// contains target user name
	TargetUser *string
}

CertificateDefinition contains the data required to create/manage certtificate chains

func CreateCertificateDefinitions

func CreateCertificateDefinitions(args *FactoryArgs) []CertificateDefinition

CreateCertificateDefinitions creates certificate definitions

type FactoryArgs

type FactoryArgs struct {
	Namespace string

	SignerDuration *time.Duration
	// Duration to subtract from cert NotAfter value
	SignerRenewBefore *time.Duration

	TargetDuration *time.Duration
	// Duration to subtract from cert NotAfter value
	TargetRenewBefore *time.Duration
}

FactoryArgs contains the required parameters to generate certs