certs

Mar 20, 2023

Changes in this version

+ func GetOperatorDeployment(ctx context.Context, kubeClient client.Client, ...) (*v1.Deployment, error)

+ func SetAsOwnedByOperatorDeployment(ctx context.Context, kubeClient client.Client, controlled *metav1.ObjectMeta, ...) error

Apr 21, 2022

Changes in this version

+ const CACertKey

+ const CAPrivateKeyKey

+ const CertTypeClient

+ const CertTypeServer

+ const TLSCertKey

+ const TLSPrivateKeyKey

+ func DumpSecretToDir(secret *v1.Secret, certDir string, basename string) error

+ func EnsureRootCACertificate(ctx context.Context, client kubernetes.Interface, ...) (*v1.Secret, error)

+ func RenewLeafCertificate(caSecret *v1.Secret, secret *v1.Secret) (bool, error)

+ type CertType string

+ type KeyPair struct

+ Certificate []byte

+ Private []byte

+ func CreateRootCA(commonName string, organizationalUnit string) (*KeyPair, error)

+ func ParseCASecret(secret *v1.Secret) (*KeyPair, error)

+ func ParseServerSecret(secret *v1.Secret) (*KeyPair, error)

+ func (pair *KeyPair) CreateDerivedCA(commonName string, organizationalUnit string) (*KeyPair, error)

+ func (pair *KeyPair) IsExpiring() (bool, *time.Time, error)

+ func (pair *KeyPair) RenewCertificate(caPrivateKey *ecdsa.PrivateKey, parentCertificate *x509.Certificate) error

+ func (pair KeyPair) CreateAndSignPair(host string, usage CertType, altDNSNames []string) (*KeyPair, error)

+ func (pair KeyPair) GenerateCASecret(namespace, name string) *v1.Secret

+ func (pair KeyPair) GenerateCertificateSecret(namespace, name string) *v1.Secret

+ func (pair KeyPair) IsValid(caPair *KeyPair, opts *x509.VerifyOptions) error

+ func (pair KeyPair) ParseCertificate() (*x509.Certificate, error)

+ func (pair KeyPair) ParseECPrivateKey() (*ecdsa.PrivateKey, error)

+ type PublicKeyInfrastructure struct

+ CaSecretName string

+ CertDir string

+ CustomResourceDefinitionsName []string

+ MutatingWebhookConfigurationName string

+ OperatorDeploymentLabelSelector string

+ OperatorNamespace string

+ SecretName string

+ ServiceName string

+ ValidatingWebhookConfigurationName string

+ func (pki PublicKeyInfrastructure) Cleanup(ctx context.Context, client *kubernetes.Clientset) error

+ func (pki PublicKeyInfrastructure) EnsureCertificate(ctx context.Context, client kubernetes.Interface, caSecret *v1.Secret) (*v1.Secret, error)

+ func (pki PublicKeyInfrastructure) InjectPublicKeyIntoCRD(ctx context.Context, apiClient apiextensionsclientset.Interface, name string, ...) error

+ func (pki PublicKeyInfrastructure) InjectPublicKeyIntoMutatingWebhook(ctx context.Context, client kubernetes.Interface, tlsSecret *v1.Secret) error

+ func (pki PublicKeyInfrastructure) InjectPublicKeyIntoValidatingWebhook(ctx context.Context, client kubernetes.Interface, tlsSecret *v1.Secret) error

+ func (pki PublicKeyInfrastructure) SchedulePeriodicMaintenance(ctx context.Context, client kubernetes.Interface, ...) error

+ func (pki PublicKeyInfrastructure) Setup(ctx context.Context, client kubernetes.Interface, ...) error