tls

Documentation

Index

• func CipherSuiteIds(names []string) []uint16
• func CipherSuiteNameMap() map[string]uint16
• func SetupExportProxyTLS(certManager certificate.Manager, kubeVirtStore cache.Store) *tls.Config
• func SetupPromTLS(certManager certificate.Manager, clusterConfig *virtconfig.ClusterConfig) *tls.Config
• func SetupTLSForVirtHandlerClients(caManager ClientCAManager, certManager certificate.Manager, ...) *tls.Config
• func SetupTLSForVirtHandlerServer(caManager ClientCAManager, certManager certificate.Manager, ...) *tls.Config
• func SetupTLSWithCertManager(caManager ClientCAManager, certManager certificate.Manager, ...) *tls.Config
• func TLSVersion(version v1.TLSProtocolVersion) uint16
• func TLSVersionName(versionId uint16) string
• type ClientCAManager
  • func NewCAManager(configMapCache cache.Store, namespace string, configMapName string) ClientCAManager
  • func NewKubernetesClientCAManager(configMapCache cache.Store) ClientCAManager

Functions

func CipherSuiteIds

func CipherSuiteIds(names []string) []uint16

func CipherSuiteNameMap

func CipherSuiteNameMap() map[string]uint16

func SetupExportProxyTLS

func SetupExportProxyTLS(certManager certificate.Manager, kubeVirtStore cache.Store) *tls.Config

func SetupPromTLS

func SetupPromTLS(certManager certificate.Manager, clusterConfig *virtconfig.ClusterConfig) *tls.Config

func SetupTLSForVirtHandlerClients

func SetupTLSForVirtHandlerClients(caManager ClientCAManager, certManager certificate.Manager, externallyManaged bool) *tls.Config

func SetupTLSForVirtHandlerServer

func SetupTLSForVirtHandlerServer(caManager ClientCAManager, certManager certificate.Manager, externallyManaged bool, clusterConfig *virtconfig.ClusterConfig) *tls.Config

func SetupTLSWithCertManager

func SetupTLSWithCertManager(caManager ClientCAManager, certManager certificate.Manager, clientAuth tls.ClientAuthType, clusterConfig *virtconfig.ClusterConfig) *tls.Config

func TLSVersion

func TLSVersion(version v1.TLSProtocolVersion) uint16

TLSVersion converts from human-readable TLS version (for example "1.1") to the values accepted by tls.Config (for example 0x301).

func TLSVersionName

func TLSVersionName(versionId uint16) string

TLSVersionName converts from tls.Config id version to human-readable TLS version.

Types

type ClientCAManager

type ClientCAManager interface {
	GetCurrent() (*x509.CertPool, error)
	GetCurrentRaw() ([]byte, error)
}

func NewCAManager

func NewCAManager(configMapCache cache.Store, namespace string, configMapName string) ClientCAManager

func NewKubernetesClientCAManager

func NewKubernetesClientCAManager(configMapCache cache.Store) ClientCAManager