stackapps

Documentation

Index

• Constants
• func BuildStackValueFromObject(u *unstructured.Unstructured) (*featuresv1alpha1.StackValue, error)
• func Create(ctx context.Context, cli client.Client, sa *featuresv1alpha1.StackApp, ...) error
• func CreateKeyPair(ctx context.Context, cli client.Client, keyName string, ...) (*corev1.Secret, *featuresv1alpha1.VerificationKey, error)
• func CreateSigningKey(ctx context.Context, cli client.Client, name string, ...) (*corev1.Secret, *rsa.PublicKey, error)
• func CreateStackValues(ctx context.Context, cli client.Client, ns string) error
• func EncodePublicKeyBytes(key *rsa.PublicKey) ([]byte, error)
• func Export(ctx context.Context, cli client.Client, name string) ([]byte, error)
• func GetSigningKey(ctx context.Context, cli client.Client, name string) (*rsa.PrivateKey, error)
• func SignManifests(k *rsa.PrivateKey, manifests []byte) ([]byte, error)
• func SigningKey(name string, key *rsa.PrivateKey) *corev1.Secret
• func ToManifests(objs ...unstructured.Unstructured) ([]byte, error)
• func Update(ctx context.Context, cli client.Client, sa *featuresv1alpha1.StackApp, ...) error
• func VerificationKey(name string, pub []byte) *featuresv1alpha1.VerificationKey
• func VerifySignature(k *rsa.PublicKey, s []byte, manifests []byte) error

Constants

const (
	SigningKeySecretType = "features.criticalstack.com/signing-key"
	SystemNamespace      = "stackapps-system"
)

Functions

func BuildStackValueFromObject

func BuildStackValueFromObject(u *unstructured.Unstructured) (*featuresv1alpha1.StackValue, error)

func Create

func Create(ctx context.Context, cli client.Client, sa *featuresv1alpha1.StackApp, ns string, objs []unstructured.Unstructured, signingKeys []string) error

func CreateKeyPair

func CreateKeyPair(ctx context.Context, cli client.Client, keyName string, mut ...func(*metav1.ObjectMeta)) (*corev1.Secret, *featuresv1alpha1.VerificationKey, error)

func CreateSigningKey

func CreateSigningKey(ctx context.Context, cli client.Client, name string, mut ...func(*metav1.ObjectMeta)) (*corev1.Secret, *rsa.PublicKey, error)

func CreateStackValues

func CreateStackValues(ctx context.Context, cli client.Client, ns string) error

func EncodePublicKeyBytes

func EncodePublicKeyBytes(key *rsa.PublicKey) ([]byte, error)

func Export

func Export(ctx context.Context, cli client.Client, name string) ([]byte, error)

func GetSigningKey

func GetSigningKey(ctx context.Context, cli client.Client, name string) (*rsa.PrivateKey, error)

func SignManifests

func SignManifests(k *rsa.PrivateKey, manifests []byte) ([]byte, error)

Sign function takes PrivateKey and stackApp manifests and returns byte slice containing signature

func SigningKey

func SigningKey(name string, key *rsa.PrivateKey) *corev1.Secret

func ToManifests

func ToManifests(objs ...unstructured.Unstructured) ([]byte, error)

func Update

func Update(ctx context.Context, cli client.Client, sa *featuresv1alpha1.StackApp, ns string, objs []unstructured.Unstructured, signingKeys []string) error

func VerificationKey

func VerificationKey(name string, pub []byte) *featuresv1alpha1.VerificationKey

func VerifySignature

func VerifySignature(k *rsa.PublicKey, s []byte, manifests []byte) error

VerifySignature Takes rsa.PublicKey (rsa.PrivateKey.PublicKey), a signature and the previously signed message returns error == nil if the signature is valid