tls

Documentation

Index

• Constants
• Variables
• func FetchAPIServerTlsProfile(k8client client.Client) (*configv1.TLSSecurityProfile, error)
• func GetClusterTLSProfileSpec(apiServerTLSProfile *configv1.TLSSecurityProfile) configv1.TLSProfileSpec
• func MinTLSVersion(profile configv1.TLSProfileSpec) string
• func TLSCiphers(profile configv1.TLSProfileSpec) []string

Constants

const (
	APIServerName = "cluster"
)

Variables

var (
	// DefaultTLSProfileType is the intermediate profile type
	DefaultTLSProfileType = configv1.TLSProfileIntermediateType
	// DefaultTLSCiphers are the default TLS ciphers for API servers
	DefaultTLSCiphers = configv1.TLSProfiles[DefaultTLSProfileType].Ciphers
	// DefaultMinTLSVersion is the default minimum TLS version for API servers
	DefaultMinTLSVersion = configv1.TLSProfiles[DefaultTLSProfileType].MinTLSVersion
)

Functions

func FetchAPIServerTlsProfile

func FetchAPIServerTlsProfile(k8client client.Client) (*configv1.TLSSecurityProfile, error)

FetchAPIServerTlsProfile fetches tlsSecurityProfile configured in APIServer

func GetClusterTLSProfileSpec

func GetClusterTLSProfileSpec(apiServerTLSProfile *configv1.TLSSecurityProfile) configv1.TLSProfileSpec

GetClusterTLSProfileSpec returns TLSProfileSpec

func MinTLSVersion

func MinTLSVersion(profile configv1.TLSProfileSpec) string

MinTLSVersion returns the minimum TLS version for the TLS security profile defined in the APIServerConfig.

func TLSCiphers

func TLSCiphers(profile configv1.TLSProfileSpec) []string

TLSCiphers returns the TLS ciphers for the TLS security profile defined in the APIServerConfig.