secrets

Documentation

Index

• type KeySpec
  • func NewKeySpec(expirationDays, rotationDays time.Duration) KeySpec
• type Kube
  • func NewKube(namespace string, ingestors []string, ...) (*Kube, error)
  • func (k *Kube) ReconcileBatchSigningKey() (map[string][]*PrioKey, error)
  • func (k *Kube) ReconcilePacketEncryptionKey() ([]*PrioKey, error)
• type PrioKey
  • func NewPrioKey() (*PrioKey, error)
  • func PrioKeyFromX962UncompressedKey(key []byte) PrioKey
  • func (p *PrioKey) CreateCertificateRequest(rand io.Reader, template *x509.CertificateRequest) (csr []byte, err error)
  • func (p *PrioKey) CreatePemEncodedCertificateRequest(rand io.Reader, template *x509.CertificateRequest) (string, error)
  • func (p *PrioKey) GetPemEncodedPublicKey() (string, error)

Types

type KeySpec

type KeySpec struct {
	// contains filtered or unexported fields
}

func NewKeySpec

func NewKeySpec(expirationDays, rotationDays time.Duration) KeySpec

type Kube

type Kube struct {
	// contains filtered or unexported fields
}

func NewKube

func NewKube(namespace string, ingestors []string, batchSigningKeySpec, packetEncryptionKeySpec KeySpec) (*Kube, error)

func (*Kube) ReconcileBatchSigningKey

func (k *Kube) ReconcileBatchSigningKey() (map[string][]*PrioKey, error)

func (*Kube) ReconcilePacketEncryptionKey

func (k *Kube) ReconcilePacketEncryptionKey() ([]*PrioKey, error)

type PrioKey

type PrioKey struct {
	KubeIdentifier *string
	Expiration     *string
	// contains filtered or unexported fields
}

func NewPrioKey

func NewPrioKey() (*PrioKey, error)

func PrioKeyFromX962UncompressedKey

func PrioKeyFromX962UncompressedKey(key []byte) PrioKey

func (*PrioKey) CreateCertificateRequest

func (p *PrioKey) CreateCertificateRequest(rand io.Reader, template *x509.CertificateRequest) (csr []byte, err error)

func (*PrioKey) CreatePemEncodedCertificateRequest

func (p *PrioKey) CreatePemEncodedCertificateRequest(rand io.Reader, template *x509.CertificateRequest) (string, error)

func (*PrioKey) GetPemEncodedPublicKey

func (p *PrioKey) GetPemEncodedPublicKey() (string, error)