Documentation

Index

Constants

View Source
const (
	// Signs certificates that will be honored as client-certs by the
	// kube-apiserver. Never auto-approved by kube-controller-manager.
	KubeAPIServerClientSignerName = "kubernetes.io/kube-apiserver-client"

	// Signs client certificates that will be honored as client-certs by the
	// kube-apiserver for a kubelet.
	// May be auto-approved by kube-controller-manager.
	KubeAPIServerClientKubeletSignerName = "kubernetes.io/kube-apiserver-client-kubelet"

	// Signs serving certificates that are honored as a valid kubelet serving
	// certificate by the kube-apiserver, but has no other guarantees.
	KubeletServingSignerName = "kubernetes.io/kubelet-serving"

	// Has no guarantees for trust at all. Some distributions may honor these
	// as client certs, but that behavior is not standard kubernetes behavior.
	LegacyUnknownSignerName = "kubernetes.io/legacy-unknown"
)

    Built in signerName values that are honoured by kube-controller-manager. None of these usages are related to ServiceAccount token secrets `.data[ca.crt]` in any way.

    View Source
    const GroupName = "certificates.k8s.io"

      GroupName is the group name use in this package

      Variables

      View Source
      var (
      	ErrInvalidLengthGenerated        = fmt.Errorf("proto: negative length found during unmarshaling")
      	ErrIntOverflowGenerated          = fmt.Errorf("proto: integer overflow")
      	ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
      )
      View Source
      var (
      	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
      	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
      	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
      
      	AddToScheme = localSchemeBuilder.AddToScheme
      )
      View Source
      var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}

        SchemeGroupVersion is group version used to register these objects

        Functions

        func Kind

        func Kind(kind string) schema.GroupKind

          Kind takes an unqualified kind and returns a Group qualified GroupKind

          func Resource

          func Resource(resource string) schema.GroupResource

            Resource takes an unqualified resource and returns a Group qualified GroupResource

            Types

            type CertificateSigningRequest

            type CertificateSigningRequest struct {
            	metav1.TypeMeta `json:",inline"`
            	// +optional
            	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
            
            	// The certificate request itself and any additional information.
            	// +optional
            	Spec CertificateSigningRequestSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
            
            	// Derived information about the request.
            	// +optional
            	Status CertificateSigningRequestStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
            }

              Describes a certificate signing request

              func (*CertificateSigningRequest) APILifecycleDeprecated

              func (in *CertificateSigningRequest) APILifecycleDeprecated() (major, minor int)

                APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

                func (*CertificateSigningRequest) APILifecycleIntroduced

                func (in *CertificateSigningRequest) APILifecycleIntroduced() (major, minor int)

                  APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

                  func (*CertificateSigningRequest) APILifecycleRemoved

                  func (in *CertificateSigningRequest) APILifecycleRemoved() (major, minor int)

                    APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

                    func (*CertificateSigningRequest) APILifecycleReplacement

                    func (in *CertificateSigningRequest) APILifecycleReplacement() schema.GroupVersionKind

                      APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

                      func (*CertificateSigningRequest) DeepCopy

                        DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequest.

                        func (*CertificateSigningRequest) DeepCopyInto

                          DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

                          func (*CertificateSigningRequest) DeepCopyObject

                          func (in *CertificateSigningRequest) DeepCopyObject() runtime.Object

                            DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

                            func (*CertificateSigningRequest) Descriptor

                            func (*CertificateSigningRequest) Descriptor() ([]byte, []int)

                            func (*CertificateSigningRequest) Marshal

                            func (m *CertificateSigningRequest) Marshal() (dAtA []byte, err error)

                            func (*CertificateSigningRequest) MarshalTo

                            func (m *CertificateSigningRequest) MarshalTo(dAtA []byte) (int, error)

                            func (*CertificateSigningRequest) MarshalToSizedBuffer

                            func (m *CertificateSigningRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

                            func (*CertificateSigningRequest) ProtoMessage

                            func (*CertificateSigningRequest) ProtoMessage()

                            func (*CertificateSigningRequest) Reset

                            func (m *CertificateSigningRequest) Reset()

                            func (*CertificateSigningRequest) Size

                            func (m *CertificateSigningRequest) Size() (n int)

                            func (*CertificateSigningRequest) String

                            func (this *CertificateSigningRequest) String() string

                            func (CertificateSigningRequest) SwaggerDoc

                            func (CertificateSigningRequest) SwaggerDoc() map[string]string

                            func (*CertificateSigningRequest) Unmarshal

                            func (m *CertificateSigningRequest) Unmarshal(dAtA []byte) error

                            func (*CertificateSigningRequest) XXX_DiscardUnknown

                            func (m *CertificateSigningRequest) XXX_DiscardUnknown()

                            func (*CertificateSigningRequest) XXX_Marshal

                            func (m *CertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

                            func (*CertificateSigningRequest) XXX_Merge

                            func (m *CertificateSigningRequest) XXX_Merge(src proto.Message)

                            func (*CertificateSigningRequest) XXX_Size

                            func (m *CertificateSigningRequest) XXX_Size() int

                            func (*CertificateSigningRequest) XXX_Unmarshal

                            func (m *CertificateSigningRequest) XXX_Unmarshal(b []byte) error

                            type CertificateSigningRequestCondition

                            type CertificateSigningRequestCondition struct {
                            	// type of the condition. Known conditions include "Approved", "Denied", and "Failed".
                            	Type RequestConditionType `json:"type" protobuf:"bytes,1,opt,name=type,casttype=RequestConditionType"`
                            	// Status of the condition, one of True, False, Unknown.
                            	// Approved, Denied, and Failed conditions may not be "False" or "Unknown".
                            	// Defaults to "True".
                            	// If unset, should be treated as "True".
                            	// +optional
                            	Status v1.ConditionStatus `json:"status" protobuf:"bytes,6,opt,name=status,casttype=k8s.io/api/core/v1.ConditionStatus"`
                            	// brief reason for the request state
                            	// +optional
                            	Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"`
                            	// human readable message with details about the request state
                            	// +optional
                            	Message string `json:"message,omitempty" protobuf:"bytes,3,opt,name=message"`
                            	// timestamp for the last update to this condition
                            	// +optional
                            	LastUpdateTime metav1.Time `json:"lastUpdateTime,omitempty" protobuf:"bytes,4,opt,name=lastUpdateTime"`
                            	// lastTransitionTime is the time the condition last transitioned from one status to another.
                            	// If unset, when a new condition type is added or an existing condition's status is changed,
                            	// the server defaults this to the current time.
                            	// +optional
                            	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty" protobuf:"bytes,5,opt,name=lastTransitionTime"`
                            }

                            func (*CertificateSigningRequestCondition) DeepCopy

                              DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestCondition.

                              func (*CertificateSigningRequestCondition) DeepCopyInto

                                DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

                                func (*CertificateSigningRequestCondition) Descriptor

                                func (*CertificateSigningRequestCondition) Descriptor() ([]byte, []int)

                                func (*CertificateSigningRequestCondition) Marshal

                                func (m *CertificateSigningRequestCondition) Marshal() (dAtA []byte, err error)

                                func (*CertificateSigningRequestCondition) MarshalTo

                                func (m *CertificateSigningRequestCondition) MarshalTo(dAtA []byte) (int, error)

                                func (*CertificateSigningRequestCondition) MarshalToSizedBuffer

                                func (m *CertificateSigningRequestCondition) MarshalToSizedBuffer(dAtA []byte) (int, error)

                                func (*CertificateSigningRequestCondition) ProtoMessage

                                func (*CertificateSigningRequestCondition) ProtoMessage()

                                func (*CertificateSigningRequestCondition) Reset

                                func (*CertificateSigningRequestCondition) Size

                                func (*CertificateSigningRequestCondition) String

                                func (CertificateSigningRequestCondition) SwaggerDoc

                                func (*CertificateSigningRequestCondition) Unmarshal

                                func (m *CertificateSigningRequestCondition) Unmarshal(dAtA []byte) error

                                func (*CertificateSigningRequestCondition) XXX_DiscardUnknown

                                func (m *CertificateSigningRequestCondition) XXX_DiscardUnknown()

                                func (*CertificateSigningRequestCondition) XXX_Marshal

                                func (m *CertificateSigningRequestCondition) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

                                func (*CertificateSigningRequestCondition) XXX_Merge

                                func (*CertificateSigningRequestCondition) XXX_Size

                                func (*CertificateSigningRequestCondition) XXX_Unmarshal

                                func (m *CertificateSigningRequestCondition) XXX_Unmarshal(b []byte) error

                                type CertificateSigningRequestList

                                type CertificateSigningRequestList struct {
                                	metav1.TypeMeta `json:",inline"`
                                	// +optional
                                	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
                                
                                	Items []CertificateSigningRequest `json:"items" protobuf:"bytes,2,rep,name=items"`
                                }

                                func (*CertificateSigningRequestList) APILifecycleDeprecated

                                func (in *CertificateSigningRequestList) APILifecycleDeprecated() (major, minor int)

                                  APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

                                  func (*CertificateSigningRequestList) APILifecycleIntroduced

                                  func (in *CertificateSigningRequestList) APILifecycleIntroduced() (major, minor int)

                                    APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

                                    func (*CertificateSigningRequestList) APILifecycleRemoved

                                    func (in *CertificateSigningRequestList) APILifecycleRemoved() (major, minor int)

                                      APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

                                      func (*CertificateSigningRequestList) APILifecycleReplacement

                                      func (in *CertificateSigningRequestList) APILifecycleReplacement() schema.GroupVersionKind

                                        APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

                                        func (*CertificateSigningRequestList) DeepCopy

                                          DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestList.

                                          func (*CertificateSigningRequestList) DeepCopyInto

                                            DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

                                            func (*CertificateSigningRequestList) DeepCopyObject

                                            func (in *CertificateSigningRequestList) DeepCopyObject() runtime.Object

                                              DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

                                              func (*CertificateSigningRequestList) Descriptor

                                              func (*CertificateSigningRequestList) Descriptor() ([]byte, []int)

                                              func (*CertificateSigningRequestList) Marshal

                                              func (m *CertificateSigningRequestList) Marshal() (dAtA []byte, err error)

                                              func (*CertificateSigningRequestList) MarshalTo

                                              func (m *CertificateSigningRequestList) MarshalTo(dAtA []byte) (int, error)

                                              func (*CertificateSigningRequestList) MarshalToSizedBuffer

                                              func (m *CertificateSigningRequestList) MarshalToSizedBuffer(dAtA []byte) (int, error)

                                              func (*CertificateSigningRequestList) ProtoMessage

                                              func (*CertificateSigningRequestList) ProtoMessage()

                                              func (*CertificateSigningRequestList) Reset

                                              func (m *CertificateSigningRequestList) Reset()

                                              func (*CertificateSigningRequestList) Size

                                              func (m *CertificateSigningRequestList) Size() (n int)

                                              func (*CertificateSigningRequestList) String

                                              func (this *CertificateSigningRequestList) String() string

                                              func (*CertificateSigningRequestList) Unmarshal

                                              func (m *CertificateSigningRequestList) Unmarshal(dAtA []byte) error

                                              func (*CertificateSigningRequestList) XXX_DiscardUnknown

                                              func (m *CertificateSigningRequestList) XXX_DiscardUnknown()

                                              func (*CertificateSigningRequestList) XXX_Marshal

                                              func (m *CertificateSigningRequestList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

                                              func (*CertificateSigningRequestList) XXX_Merge

                                              func (m *CertificateSigningRequestList) XXX_Merge(src proto.Message)

                                              func (*CertificateSigningRequestList) XXX_Size

                                              func (m *CertificateSigningRequestList) XXX_Size() int

                                              func (*CertificateSigningRequestList) XXX_Unmarshal

                                              func (m *CertificateSigningRequestList) XXX_Unmarshal(b []byte) error

                                              type CertificateSigningRequestSpec

                                              type CertificateSigningRequestSpec struct {
                                              	// Base64-encoded PKCS#10 CSR data
                                              	// +listType=atomic
                                              	Request []byte `json:"request" protobuf:"bytes,1,opt,name=request"`
                                              
                                              	// Requested signer for the request. It is a qualified name in the form:
                                              	// `scope-hostname.io/name`.
                                              	// If empty, it will be defaulted:
                                              	//  1. If it's a kubelet client certificate, it is assigned
                                              	//     "kubernetes.io/kube-apiserver-client-kubelet".
                                              	//  2. If it's a kubelet serving certificate, it is assigned
                                              	//     "kubernetes.io/kubelet-serving".
                                              	//  3. Otherwise, it is assigned "kubernetes.io/legacy-unknown".
                                              	// Distribution of trust for signers happens out of band.
                                              	// You can select on this field using `spec.signerName`.
                                              	// +optional
                                              	SignerName *string `json:"signerName,omitempty" protobuf:"bytes,7,opt,name=signerName"`
                                              
                                              	// allowedUsages specifies a set of usage contexts the key will be
                                              	// valid for.
                                              	// See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3
                                              	//      https://tools.ietf.org/html/rfc5280#section-4.2.1.12
                                              	// Valid values are:
                                              	//  "signing",
                                              	//  "digital signature",
                                              	//  "content commitment",
                                              	//  "key encipherment",
                                              	//  "key agreement",
                                              	//  "data encipherment",
                                              	//  "cert sign",
                                              	//  "crl sign",
                                              	//  "encipher only",
                                              	//  "decipher only",
                                              	//  "any",
                                              	//  "server auth",
                                              	//  "client auth",
                                              	//  "code signing",
                                              	//  "email protection",
                                              	//  "s/mime",
                                              	//  "ipsec end system",
                                              	//  "ipsec tunnel",
                                              	//  "ipsec user",
                                              	//  "timestamping",
                                              	//  "ocsp signing",
                                              	//  "microsoft sgc",
                                              	//  "netscape sgc"
                                              	// +listType=atomic
                                              	Usages []KeyUsage `json:"usages,omitempty" protobuf:"bytes,5,opt,name=usages"`
                                              
                                              	// Information about the requesting user.
                                              	// See user.Info interface for details.
                                              	// +optional
                                              	Username string `json:"username,omitempty" protobuf:"bytes,2,opt,name=username"`
                                              	// UID information about the requesting user.
                                              	// See user.Info interface for details.
                                              	// +optional
                                              	UID string `json:"uid,omitempty" protobuf:"bytes,3,opt,name=uid"`
                                              	// Group information about the requesting user.
                                              	// See user.Info interface for details.
                                              	// +listType=atomic
                                              	// +optional
                                              	Groups []string `json:"groups,omitempty" protobuf:"bytes,4,rep,name=groups"`
                                              	// Extra information about the requesting user.
                                              	// See user.Info interface for details.
                                              	// +optional
                                              	Extra map[string]ExtraValue `json:"extra,omitempty" protobuf:"bytes,6,rep,name=extra"`
                                              }

                                                This information is immutable after the request is created. Only the Request and Usages fields can be set on creation, other fields are derived by Kubernetes and cannot be modified by users.

                                                func (*CertificateSigningRequestSpec) DeepCopy

                                                  DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestSpec.

                                                  func (*CertificateSigningRequestSpec) DeepCopyInto

                                                    DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

                                                    func (*CertificateSigningRequestSpec) Descriptor

                                                    func (*CertificateSigningRequestSpec) Descriptor() ([]byte, []int)

                                                    func (*CertificateSigningRequestSpec) Marshal

                                                    func (m *CertificateSigningRequestSpec) Marshal() (dAtA []byte, err error)

                                                    func (*CertificateSigningRequestSpec) MarshalTo

                                                    func (m *CertificateSigningRequestSpec) MarshalTo(dAtA []byte) (int, error)

                                                    func (*CertificateSigningRequestSpec) MarshalToSizedBuffer

                                                    func (m *CertificateSigningRequestSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

                                                    func (*CertificateSigningRequestSpec) ProtoMessage

                                                    func (*CertificateSigningRequestSpec) ProtoMessage()

                                                    func (*CertificateSigningRequestSpec) Reset

                                                    func (m *CertificateSigningRequestSpec) Reset()

                                                    func (*CertificateSigningRequestSpec) Size

                                                    func (m *CertificateSigningRequestSpec) Size() (n int)

                                                    func (*CertificateSigningRequestSpec) String

                                                    func (this *CertificateSigningRequestSpec) String() string

                                                    func (CertificateSigningRequestSpec) SwaggerDoc

                                                    func (CertificateSigningRequestSpec) SwaggerDoc() map[string]string

                                                    func (*CertificateSigningRequestSpec) Unmarshal

                                                    func (m *CertificateSigningRequestSpec) Unmarshal(dAtA []byte) error

                                                    func (*CertificateSigningRequestSpec) XXX_DiscardUnknown

                                                    func (m *CertificateSigningRequestSpec) XXX_DiscardUnknown()

                                                    func (*CertificateSigningRequestSpec) XXX_Marshal

                                                    func (m *CertificateSigningRequestSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

                                                    func (*CertificateSigningRequestSpec) XXX_Merge

                                                    func (m *CertificateSigningRequestSpec) XXX_Merge(src proto.Message)

                                                    func (*CertificateSigningRequestSpec) XXX_Size

                                                    func (m *CertificateSigningRequestSpec) XXX_Size() int

                                                    func (*CertificateSigningRequestSpec) XXX_Unmarshal

                                                    func (m *CertificateSigningRequestSpec) XXX_Unmarshal(b []byte) error

                                                    type CertificateSigningRequestStatus

                                                    type CertificateSigningRequestStatus struct {
                                                    	// Conditions applied to the request, such as approval or denial.
                                                    	// +listType=map
                                                    	// +listMapKey=type
                                                    	// +optional
                                                    	Conditions []CertificateSigningRequestCondition `json:"conditions,omitempty" protobuf:"bytes,1,rep,name=conditions"`
                                                    
                                                    	// If request was approved, the controller will place the issued certificate here.
                                                    	// +listType=atomic
                                                    	// +optional
                                                    	Certificate []byte `json:"certificate,omitempty" protobuf:"bytes,2,opt,name=certificate"`
                                                    }

                                                    func (*CertificateSigningRequestStatus) DeepCopy

                                                      DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestStatus.

                                                      func (*CertificateSigningRequestStatus) DeepCopyInto

                                                        DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

                                                        func (*CertificateSigningRequestStatus) Descriptor

                                                        func (*CertificateSigningRequestStatus) Descriptor() ([]byte, []int)

                                                        func (*CertificateSigningRequestStatus) Marshal

                                                        func (m *CertificateSigningRequestStatus) Marshal() (dAtA []byte, err error)

                                                        func (*CertificateSigningRequestStatus) MarshalTo

                                                        func (m *CertificateSigningRequestStatus) MarshalTo(dAtA []byte) (int, error)

                                                        func (*CertificateSigningRequestStatus) MarshalToSizedBuffer

                                                        func (m *CertificateSigningRequestStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

                                                        func (*CertificateSigningRequestStatus) ProtoMessage

                                                        func (*CertificateSigningRequestStatus) ProtoMessage()

                                                        func (*CertificateSigningRequestStatus) Reset

                                                        func (*CertificateSigningRequestStatus) Size

                                                        func (m *CertificateSigningRequestStatus) Size() (n int)

                                                        func (*CertificateSigningRequestStatus) String

                                                        func (this *CertificateSigningRequestStatus) String() string

                                                        func (CertificateSigningRequestStatus) SwaggerDoc

                                                        func (*CertificateSigningRequestStatus) Unmarshal

                                                        func (m *CertificateSigningRequestStatus) Unmarshal(dAtA []byte) error

                                                        func (*CertificateSigningRequestStatus) XXX_DiscardUnknown

                                                        func (m *CertificateSigningRequestStatus) XXX_DiscardUnknown()

                                                        func (*CertificateSigningRequestStatus) XXX_Marshal

                                                        func (m *CertificateSigningRequestStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

                                                        func (*CertificateSigningRequestStatus) XXX_Merge

                                                        func (m *CertificateSigningRequestStatus) XXX_Merge(src proto.Message)

                                                        func (*CertificateSigningRequestStatus) XXX_Size

                                                        func (m *CertificateSigningRequestStatus) XXX_Size() int

                                                        func (*CertificateSigningRequestStatus) XXX_Unmarshal

                                                        func (m *CertificateSigningRequestStatus) XXX_Unmarshal(b []byte) error

                                                        type ExtraValue

                                                        type ExtraValue []string

                                                          ExtraValue masks the value so protobuf can generate +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false

                                                          func (ExtraValue) DeepCopy

                                                          func (in ExtraValue) DeepCopy() ExtraValue

                                                            DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExtraValue.

                                                            func (ExtraValue) DeepCopyInto

                                                            func (in ExtraValue) DeepCopyInto(out *ExtraValue)

                                                              DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

                                                              func (*ExtraValue) Descriptor

                                                              func (*ExtraValue) Descriptor() ([]byte, []int)

                                                              func (ExtraValue) Marshal

                                                              func (m ExtraValue) Marshal() (dAtA []byte, err error)

                                                              func (ExtraValue) MarshalTo

                                                              func (m ExtraValue) MarshalTo(dAtA []byte) (int, error)

                                                              func (ExtraValue) MarshalToSizedBuffer

                                                              func (m ExtraValue) MarshalToSizedBuffer(dAtA []byte) (int, error)

                                                              func (*ExtraValue) ProtoMessage

                                                              func (*ExtraValue) ProtoMessage()

                                                              func (*ExtraValue) Reset

                                                              func (m *ExtraValue) Reset()

                                                              func (ExtraValue) Size

                                                              func (m ExtraValue) Size() (n int)

                                                              func (ExtraValue) String

                                                              func (t ExtraValue) String() string

                                                              func (*ExtraValue) Unmarshal

                                                              func (m *ExtraValue) Unmarshal(dAtA []byte) error

                                                              func (*ExtraValue) XXX_DiscardUnknown

                                                              func (m *ExtraValue) XXX_DiscardUnknown()

                                                              func (*ExtraValue) XXX_Marshal

                                                              func (m *ExtraValue) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

                                                              func (*ExtraValue) XXX_Merge

                                                              func (m *ExtraValue) XXX_Merge(src proto.Message)

                                                              func (*ExtraValue) XXX_Size

                                                              func (m *ExtraValue) XXX_Size() int

                                                              func (*ExtraValue) XXX_Unmarshal

                                                              func (m *ExtraValue) XXX_Unmarshal(b []byte) error

                                                              type KeyUsage

                                                              type KeyUsage string

                                                                KeyUsages specifies valid usage contexts for keys. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3

                                                                https://tools.ietf.org/html/rfc5280#section-4.2.1.12
                                                                
                                                                const (
                                                                	UsageSigning           KeyUsage = "signing"
                                                                	UsageDigitalSignature  KeyUsage = "digital signature"
                                                                	UsageContentCommitment KeyUsage = "content commitment"
                                                                	UsageKeyEncipherment   KeyUsage = "key encipherment"
                                                                	UsageKeyAgreement      KeyUsage = "key agreement"
                                                                	UsageDataEncipherment  KeyUsage = "data encipherment"
                                                                	UsageCertSign          KeyUsage = "cert sign"
                                                                	UsageCRLSign           KeyUsage = "crl sign"
                                                                	UsageEncipherOnly      KeyUsage = "encipher only"
                                                                	UsageDecipherOnly      KeyUsage = "decipher only"
                                                                	UsageAny               KeyUsage = "any"
                                                                	UsageServerAuth        KeyUsage = "server auth"
                                                                	UsageClientAuth        KeyUsage = "client auth"
                                                                	UsageCodeSigning       KeyUsage = "code signing"
                                                                	UsageEmailProtection   KeyUsage = "email protection"
                                                                	UsageSMIME             KeyUsage = "s/mime"
                                                                	UsageIPsecEndSystem    KeyUsage = "ipsec end system"
                                                                	UsageIPsecTunnel       KeyUsage = "ipsec tunnel"
                                                                	UsageIPsecUser         KeyUsage = "ipsec user"
                                                                	UsageTimestamping      KeyUsage = "timestamping"
                                                                	UsageOCSPSigning       KeyUsage = "ocsp signing"
                                                                	UsageMicrosoftSGC      KeyUsage = "microsoft sgc"
                                                                	UsageNetscapeSGC       KeyUsage = "netscape sgc"
                                                                )

                                                                type RequestConditionType

                                                                type RequestConditionType string
                                                                const (
                                                                	CertificateApproved RequestConditionType = "Approved"
                                                                	CertificateDenied   RequestConditionType = "Denied"
                                                                	CertificateFailed   RequestConditionType = "Failed"
                                                                )

                                                                  These are the possible conditions for a certificate request.