certificates

Documentation

Index

• Constants
• func GetCAsFromConfigMap(configMap *core.ConfigMap, key string) ([]byte, error)
• func GetInitialCAConfigMap(ctx context.Context, client client.Client) (*core.ConfigMap, error)
• func MergeCAsConfigMaps(initialCAConfigMap, currentCAConfigMap *core.ConfigMap, subject string) ([]byte, error)

Constants

const (
	// CABundleKey is the key in the Kube API Server CA and trusted CA ConfigMaps where the CA bundle is located
	CABundleKey = "ca-bundle.crt"
	// KubeApiServerOperatorNamespace is the namespace of the ConfigMap that contains the CA for the kubelet
	// to recognize the kube-apiserver client certificate.
	KubeApiServerOperatorNamespace = "openshift-kube-apiserver-operator"
	// KubeAPIServerServingCAConfigMapName is the name of the ConfigMap that contains the CA for the kubelet to
	// recognize the kube-apiserver client certificate.
	KubeAPIServerServingCAConfigMapName = "kube-apiserver-to-kubelet-client-ca"

	// ProxyCertsConfigMap is the name of the ConfigMap that holds the trusted CA bundle for a cluster-wide proxy
	ProxyCertsConfigMap = "trusted-ca"
)

Functions

func GetCAsFromConfigMap

func GetCAsFromConfigMap(configMap *core.ConfigMap, key string) ([]byte, error)

GetCAsFromConfigMap extracts the given key from the ConfigMap object Adapted from https://github.com/openshift/machine-config-operator/blob/1a9f70f333a2287c4a8f2e75cb37b94c7c7b2a20/pkg/operator/sync.go#L874

func GetInitialCAConfigMap

func GetInitialCAConfigMap(ctx context.Context, client client.Client) (*core.ConfigMap, error)

GetInitialCAConfigMap returns the ConfigMap that contains the initial CA certificates

func MergeCAsConfigMaps

func MergeCAsConfigMaps(initialCAConfigMap, currentCAConfigMap *core.ConfigMap, subject string) ([]byte, error)

MergeCAsConfigMaps merges the given CA ConfigMaps for the specified subject