certificate

Documentation

Overview

Copyright Contributors to the Open Cluster Management project

Copyright Contributors to the Open Cluster Management project

Index

• Constants
• func CABundleDir(certsDir string) string
• func CertsDirectory(basePath string) string
• func ClientCACertDir(certsDir string) string
• func ClientCACertFile(certsDir string) string
• func ClientCAKeyFile(certsDir string) string
• func DefaultRootCAFile(certsDir string) string
• func DefaultRootCAKeyFile(certsDir string) string
• func DefaultRootCASerialFile(certsDir string) string
• func EtcdCABundlePath(certsDir string) string
• func EtcdCACertDir(certsDir string) string
• func EtcdClientCertDir(certsDir string) string
• func EtcdPeerCertDir(certsDir string) string
• func InitCerts(cfg *configs.ControlplaneRunConfig) (*certchains.CertificateChains, error)
• func InitKubeconfig(cfg *configs.ControlplaneRunConfig, certChains *certchains.CertificateChains) error
• func KubeConfigFile(certsDir string) string
• func RequestHeaderCABundlePath(certsDir string) string
• func RequestHeaderCACertDir(certsDir string) string
• func RootCABundlePath(certsDir string) string
• func RootCACertDir(certsDir string) string
• func ServerCACertDir(certsDir string) string
• func ServiceAccountKeyFile(certsDir string) string
• func ServingCertFile(certsDir string) string
• func ServingKeyFile(certsDir string) string
• func TotalClientCABundlePath(certsDir string) string
• func TotalServerCABundlePath(certsDir string) string

Constants

const (
	ServiceAccountKeyFileName = "kube-serviceaccount.key"
	KubeconfigFileName        = "kube-aggregator.kubeconfig"
	// client user info
	UserAdmin         = "system:admin"
	UserKubeApiserver = "kube-apiserver"
	UserAuthProxy     = "system:auth-proxy"
	GroupMasters      = "system:masters"
	UserEtcd          = "etcd"
	GroupEtcd         = "etcd"
	UserEtcdPeer      = "system:etcd-peer:client"
	GroupEtcdPeer     = "system:etcd-peers"
	// bundle
	CABundleDirName               = "ca-bundle"
	RootCABundleFileName          = "root-ca-bundle.crt"
	ServerCABundleFileName        = "server-ca-bundle.crt"
	ClientCABundleFileName        = "client-ca-bundle.crt"
	RequestHeaderCABundleFileName = "request-header-ca-bundle.crt"
	EtcdCABundleFileName          = "etcd-ca-bundle.crt"
	// cert dirs
	RootCACertDirName          = "root-ca"
	ServerCACertDirName        = "server-ca"
	ClientCACertDirName        = "client-ca"
	RequestHeaderCACertDirName = "request-header-ca"
	EtcdCACertDirName          = "etcd-ca"
	// sub-dir names
	AdminCertDirName          = "admin"
	KubeApiserverCertDirName  = "kube-apiserver"
	KubeAggregatorCertDirName = "kube-aggregator"
	AuthProxyCertDirName      = "auth-proxy"
	PeerCertDirName           = "peer"
	ClientCertDirName         = "client"

	// validity
	LongLivedCertificateValidityDays  = 365 * 5
	ShortLivedCertificateValidityDays = 365
)

Functions

func CABundleDir

func CABundleDir(certsDir string) string

ca-bundle paths

func CertsDirectory

func CertsDirectory(basePath string) string

func ClientCACertDir

func ClientCACertDir(certsDir string) string

func ClientCACertFile

func ClientCACertFile(certsDir string) string

func ClientCAKeyFile

func ClientCAKeyFile(certsDir string) string

func DefaultRootCAFile

func DefaultRootCAFile(certsDir string) string

func DefaultRootCAKeyFile

func DefaultRootCAKeyFile(certsDir string) string

func DefaultRootCASerialFile

func DefaultRootCASerialFile(certsDir string) string

func EtcdCABundlePath

func EtcdCABundlePath(certsDir string) string

func EtcdCACertDir

func EtcdCACertDir(certsDir string) string

etcd

func EtcdClientCertDir

func EtcdClientCertDir(certsDir string) string

func EtcdPeerCertDir

func EtcdPeerCertDir(certsDir string) string

func InitCerts

func InitCerts(cfg *configs.ControlplaneRunConfig) (*certchains.CertificateChains, error)

func InitKubeconfig

func InitKubeconfig(
	cfg *configs.ControlplaneRunConfig,
	certChains *certchains.CertificateChains,
) error

func KubeConfigFile

func KubeConfigFile(certsDir string) string

func RequestHeaderCABundlePath

func RequestHeaderCABundlePath(certsDir string) string

func RequestHeaderCACertDir

func RequestHeaderCACertDir(certsDir string) string

func RootCABundlePath

func RootCABundlePath(certsDir string) string

func RootCACertDir

func RootCACertDir(certsDir string) string

cert sub-dirs

func ServerCACertDir

func ServerCACertDir(certsDir string) string

func ServiceAccountKeyFile

func ServiceAccountKeyFile(certsDir string) string

func ServingCertFile

func ServingCertFile(certsDir string) string

server and client cert files

func ServingKeyFile

func ServingKeyFile(certsDir string) string

func TotalClientCABundlePath

func TotalClientCABundlePath(certsDir string) string

func TotalServerCABundlePath

func TotalServerCABundlePath(certsDir string) string