pki

Documentation

Index

• func CleanCertSecrets(client kubernetes.Interface, ns string) error
• func WaitCertificateIssuedReady(client certclient.Interface, name string, ns string, timeout time.Duration) error
• func WatchCertificatesIssuedReady(ctx context.Context, client certclient.Interface, ns string) (<-chan Certificate, error)
• type Certificate
  • func ToCertificates(services []*v1.Service) []Certificate
  • func (c Certificate) String() string

Functions

func CleanCertSecrets

func CleanCertSecrets(client kubernetes.Interface, ns string) error

CleanCertSecrets removes all secrets which hold a TLS certificate issued by cert-manager

func WaitCertificateIssuedReady

func WaitCertificateIssuedReady(client certclient.Interface, name string, ns string, timeout time.Duration) error

WaitCertificateIssuedReady wait for a certificate issued by cert-manager until is ready or the timeout is reached

func WatchCertificatesIssuedReady

func WatchCertificatesIssuedReady(ctx context.Context, client certclient.Interface, ns string) (<-chan Certificate, error)

WatchCertificatesIssuedReady starts watching for ready certificate in the given namespace. If the namespace is empty, it will watch the entire cluster. The caller can stop watching by cancelling the context.

Types

type Certificate

type Certificate struct {
	// Name certificate name
	Name string
	//Namespace certificate namespace
	Namespace string
}

Certificate keeps some information related to a certificate issued by cert-manager

func ToCertificates

func ToCertificates(services []*v1.Service) []Certificate

ToCertificates converts a list of services into a list of certificates. The certificate name is built from the application label of the service.

func (Certificate) String

func (c Certificate) String() string

String returns the certificate information in a string format