pki

Documentation

Index

• type CertificateAuthority
  • func NewCertificateAuthority(cli *vaultapi.Client) (*CertificateAuthority, error)
  • func NewExternalCertificateAuthority(vaultAddr, vaultToken string) (*CertificateAuthority, error)
  • func (ca *CertificateAuthority) ConsulServerTLS(ctx context.Context, ip, ttl string) (*TLSConfigPEM, error)
  • func (ca *CertificateAuthority) NomadServerTLS(ctx context.Context, ip, ttl string) (*TLSConfigPEM, error)
  • func (ca *CertificateAuthority) VaultServerTLS(ctx context.Context, ip, ttl string) (*TLSConfigPEM, error)
• type TLSConfigPEM

Types

type CertificateAuthority

type CertificateAuthority struct {
	// contains filtered or unexported fields
}

func NewCertificateAuthority

func NewCertificateAuthority(cli *vaultapi.Client) (*CertificateAuthority, error)

NewCertificateAuthority mounts PKI secrets engines using the client, then returns a CertificateAuthority which will use them to generate certs.

func NewExternalCertificateAuthority

func NewExternalCertificateAuthority(vaultAddr, vaultToken string) (*CertificateAuthority, error)

func (*CertificateAuthority) ConsulServerTLS

func (ca *CertificateAuthority) ConsulServerTLS(ctx context.Context, ip, ttl string) (*TLSConfigPEM, error)

func (*CertificateAuthority) NomadServerTLS

func (ca *CertificateAuthority) NomadServerTLS(ctx context.Context, ip, ttl string) (*TLSConfigPEM, error)

func (*CertificateAuthority) VaultServerTLS

func (ca *CertificateAuthority) VaultServerTLS(ctx context.Context, ip, ttl string) (*TLSConfigPEM, error)

type TLSConfigPEM

type TLSConfigPEM struct {
	CA         string
	Cert       string
	PrivateKey string
}