issue

Documentation

Index

• Constants
• Variables
• func ActionImpl(strategy Strategy, c *cli.Context) error
• func EnsurePrivateKey(env *action.Environment, ktype wcrypto.KeyType, privPath string) (crypto.PrivateKey, error)
• func IssuePrivateKeyAndCertificateFile(ctx context.Context, env *action.Environment, strategy Strategy, cfg *Config) error
• func PrepareKeyTypePath(env *action.Environment, ktype *wcrypto.KeyType, privPath *string) error
• func PromptCertPath(env *action.Environment, privPath, certPath string) (string, error)
• func VerifyKeyType(path string, expected wcrypto.KeyType) (crypto.PublicKey, error)
• func WriteKubernetesSecret(ctx context.Context, env *action.Environment, cfg *Config, ...) error
• type CertStillValidErr
  • func (e CertStillValidErr) Error() string
  • func (CertStillValidErr) ExitCode() int
  • func (CertStillValidErr) Is(target error) bool
• type Config
  • func (c *Config) UnmarshalYAML(unmarshal func(interface{}) error) error
  • func (c *Config) Verify(env *action.Environment, noDefault bool) error
• type IncompatibleCertErr
  • func (e IncompatibleCertErr) Error() string
  • func (IncompatibleCertErr) Is(target error) bool
  • func (e IncompatibleCertErr) Unwrap() error
• type Local
  • func (l Local) CACert(ctx context.Context, env *action.Environment) *x509.Certificate
  • func (l Local) EnsureCA(ctx context.Context, env *action.Environment) error
  • func (Local) Issue(ctx context.Context, env *action.Environment, pub crypto.PublicKey, ...) ([]byte, error)
• type Strategy

Constants

const ConfigTemplateText = `` /* 2998-byte string literal not displayed */

Variables

var Command = &cli.Command{
	Name:  "issue",
	Usage: "Issue a new certificate or renew an existing certificate. Generates private key if needed.",
	Flags: append(structflags.MustPopulateFlagsFromStruct(Config{}),
		&cli.BoolFlag{
			Name:  "dump-template",
			Usage: "dump configuration template yaml without making actual changes",
		},
	),
	Action: func(c *cli.Context) error {
		env := action.GlobalEnvironment
		profile, err := env.Profile()
		if err != nil {
			return err
		}

		return ActionImpl(Local{Profile: profile}, c)
	},
}

var ErrCertKeyPathConflict = errors.New("Specified path conflicts with private key output path.")

var RenewBeforeMustNotBeAutoIfNoDefaultErr = errors.New("renewBefore must not be auto if noDefault is specified.")

Functions

func ActionImpl

func ActionImpl(strategy Strategy, c *cli.Context) error

func EnsurePrivateKey

func EnsurePrivateKey(env *action.Environment, ktype wcrypto.KeyType, privPath string) (crypto.PrivateKey, error)

func IssuePrivateKeyAndCertificateFile

func IssuePrivateKeyAndCertificateFile(ctx context.Context, env *action.Environment, strategy Strategy, cfg *Config) error

func PrepareKeyTypePath

func PrepareKeyTypePath(env *action.Environment, ktype *wcrypto.KeyType, privPath *string) error

func PromptCertPath

func PromptCertPath(env *action.Environment, privPath, certPath string) (string, error)

func VerifyKeyType

func VerifyKeyType(path string, expected wcrypto.KeyType) (crypto.PublicKey, error)

func WriteKubernetesSecret

func WriteKubernetesSecret(ctx context.Context, env *action.Environment, cfg *Config, cacert *x509.Certificate) error

Types

type CertStillValidErr

type CertStillValidErr struct {
	ValidLeft           time.Duration
	RenewBeforeOrig     period.Days
	RenewBeforeExpanded period.Days
}

func (CertStillValidErr) Error

func (e CertStillValidErr) Error() string

func (CertStillValidErr) ExitCode

func (CertStillValidErr) ExitCode() int

func (CertStillValidErr) Is

func (CertStillValidErr) Is(target error) bool

type Config

type Config struct {
	PrivateKeyPath string `yaml:"privateKeyPath" flags:"priv,private key input/output path,,path"`
	CertPath       string `yaml:"certPath" flags:"cert,cert input/output path,,path"`

	KubernetesSecretPath      string `` /* 143-byte string literal not displayed */
	KubernetesSecretName      string `` /* 149-byte string literal not displayed */
	KubernetesSecretNamespace string `` /* 164-byte string literal not displayed */

	Issue *issue.Config `yaml:",inline" flags:""`

	RenewBefore period.Days `` /* 136-byte string literal not displayed */

	// This is here to avoid yaml.v3 Decoder with KnownFields(true) throwing error for valid AppFlags fields
	XXX_AppFlags appflags.AppFlags `yaml:",inline"`
}

var UnmarshalConfigTemplate *Config

func (*Config) UnmarshalYAML

func (c *Config) UnmarshalYAML(unmarshal func(interface{}) error) error

func (*Config) Verify

func (c *Config) Verify(env *action.Environment, noDefault bool) error

type IncompatibleCertErr

type IncompatibleCertErr struct {
	Wrap error
}

func (IncompatibleCertErr) Error

func (e IncompatibleCertErr) Error() string

func (IncompatibleCertErr) Is

func (IncompatibleCertErr) Is(target error) bool

func (IncompatibleCertErr) Unwrap

func (e IncompatibleCertErr) Unwrap() error

type Local

type Local struct {
	Profile *storage.Profile
}

func (Local) CACert

func (l Local) CACert(ctx context.Context, env *action.Environment) *x509.Certificate

func (Local) EnsureCA

func (l Local) EnsureCA(ctx context.Context, env *action.Environment) error

func (Local) Issue

func (Local) Issue(ctx context.Context, env *action.Environment, pub crypto.PublicKey, cfg *issue.Config) ([]byte, error)

type Strategy

type Strategy interface {
	EnsureCA(ctx context.Context, env *action.Environment) error
	CACert(ctx context.Context, env *action.Environment) *x509.Certificate
	Issue(ctx context.Context, env *action.Environment, pub crypto.PublicKey, cfg *issue.Config) ([]byte, error)
}