api – k8s.io/api/certificates/v1beta1 Index | Files

package v1beta1

import "k8s.io/api/certificates/v1beta1"

Index

Constants 

const (
	// Signs certificates that will be honored as client-certs by the
	// kube-apiserver. Never auto-approved by kube-controller-manager.
	KubeAPIServerClientSignerName = "kubernetes.io/kube-apiserver-client"

	// Signs client certificates that will be honored as client-certs by the
	// kube-apiserver for a kubelet.
	// May be auto-approved by kube-controller-manager.
	KubeAPIServerClientKubeletSignerName = "kubernetes.io/kube-apiserver-client-kubelet"

	// Signs serving certificates that are honored as a valid kubelet serving
	// certificate by the kube-apiserver, but has no other guarantees.
	KubeletServingSignerName = "kubernetes.io/kubelet-serving"

	// Has no guarantees for trust at all. Some distributions may honor these
	// as client certs, but that behavior is not standard kubernetes behavior.
	LegacyUnknownSignerName = "kubernetes.io/legacy-unknown"
)

Built in signerName values that are honoured by kube-controller-manager. None of these usages are related to ServiceAccount token secrets `.data[ca.crt]` in any way. 

const GroupName = "certificates.k8s.io"

GroupName is the group name use in this package

Variables 

var (
	ErrInvalidLengthGenerated        = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated          = fmt.Errorf("proto: integer overflow")
	ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
var (
	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

	AddToScheme = localSchemeBuilder.AddToScheme
)
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Kind 

func Kind(kind string) schema.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind

func Resource 

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type CertificateSigningRequest 

type CertificateSigningRequest struct {
	metav1.TypeMeta `json:",inline"`
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// spec contains the certificate request, and is immutable after creation.
	// Only the request, signerName, expirationSeconds, and usages fields can be set on creation.
	// Other fields are derived by Kubernetes and cannot be modified by users.
	Spec CertificateSigningRequestSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`

	// Derived information about the request.
	// +optional
	Status CertificateSigningRequestStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}

Describes a certificate signing request

func (*CertificateSigningRequest) APILifecycleDeprecated 

func (in *CertificateSigningRequest) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*CertificateSigningRequest) APILifecycleIntroduced 

func (in *CertificateSigningRequest) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*CertificateSigningRequest) APILifecycleRemoved 

func (in *CertificateSigningRequest) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*CertificateSigningRequest) APILifecycleReplacement 

func (in *CertificateSigningRequest) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*CertificateSigningRequest) DeepCopy 

func (in *CertificateSigningRequest) DeepCopy() *CertificateSigningRequest

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequest.

func (*CertificateSigningRequest) DeepCopyInto 

func (in *CertificateSigningRequest) DeepCopyInto(out *CertificateSigningRequest)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateSigningRequest) DeepCopyObject 

func (in *CertificateSigningRequest) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CertificateSigningRequest) Descriptor 

func (*CertificateSigningRequest) Descriptor() ([]byte, []int)

func (*CertificateSigningRequest) Marshal 

func (m *CertificateSigningRequest) Marshal() (dAtA []byte, err error)

func (*CertificateSigningRequest) MarshalTo 

func (m *CertificateSigningRequest) MarshalTo(dAtA []byte) (int, error)

func (*CertificateSigningRequest) MarshalToSizedBuffer 

func (m *CertificateSigningRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*CertificateSigningRequest) ProtoMessage 

func (*CertificateSigningRequest) ProtoMessage()

func (*CertificateSigningRequest) Reset 

func (m *CertificateSigningRequest) Reset()

func (*CertificateSigningRequest) Size 

func (m *CertificateSigningRequest) Size() (n int)

func (*CertificateSigningRequest) String 

func (this *CertificateSigningRequest) String() string

func (CertificateSigningRequest) SwaggerDoc 

func (CertificateSigningRequest) SwaggerDoc() map[string]string

func (*CertificateSigningRequest) Unmarshal 

func (m *CertificateSigningRequest) Unmarshal(dAtA []byte) error

func (*CertificateSigningRequest) XXX_DiscardUnknown 

func (m *CertificateSigningRequest) XXX_DiscardUnknown()

func (*CertificateSigningRequest) XXX_Marshal 

func (m *CertificateSigningRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertificateSigningRequest) XXX_Merge 

func (m *CertificateSigningRequest) XXX_Merge(src proto.Message)

func (*CertificateSigningRequest) XXX_Size 

func (m *CertificateSigningRequest) XXX_Size() int

func (*CertificateSigningRequest) XXX_Unmarshal 

func (m *CertificateSigningRequest) XXX_Unmarshal(b []byte) error

type CertificateSigningRequestCondition 

type CertificateSigningRequestCondition struct {
	// type of the condition. Known conditions include "Approved", "Denied", and "Failed".
	Type RequestConditionType `json:"type" protobuf:"bytes,1,opt,name=type,casttype=RequestConditionType"`
	// Status of the condition, one of True, False, Unknown.
	// Approved, Denied, and Failed conditions may not be "False" or "Unknown".
	// Defaults to "True".
	// If unset, should be treated as "True".
	// +optional
	Status v1.ConditionStatus `json:"status" protobuf:"bytes,6,opt,name=status,casttype=k8s.io/api/core/v1.ConditionStatus"`
	// brief reason for the request state
	// +optional
	Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"`
	// human readable message with details about the request state
	// +optional
	Message string `json:"message,omitempty" protobuf:"bytes,3,opt,name=message"`
	// timestamp for the last update to this condition
	// +optional
	LastUpdateTime metav1.Time `json:"lastUpdateTime,omitempty" protobuf:"bytes,4,opt,name=lastUpdateTime"`
	// lastTransitionTime is the time the condition last transitioned from one status to another.
	// If unset, when a new condition type is added or an existing condition's status is changed,
	// the server defaults this to the current time.
	// +optional
	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty" protobuf:"bytes,5,opt,name=lastTransitionTime"`
}

func (*CertificateSigningRequestCondition) DeepCopy 

func (in *CertificateSigningRequestCondition) DeepCopy() *CertificateSigningRequestCondition

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestCondition.

func (*CertificateSigningRequestCondition) DeepCopyInto 

func (in *CertificateSigningRequestCondition) DeepCopyInto(out *CertificateSigningRequestCondition)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateSigningRequestCondition) Descriptor 

func (*CertificateSigningRequestCondition) Descriptor() ([]byte, []int)

func (*CertificateSigningRequestCondition) Marshal 

func (m *CertificateSigningRequestCondition) Marshal() (dAtA []byte, err error)

func (*CertificateSigningRequestCondition) MarshalTo 

func (m *CertificateSigningRequestCondition) MarshalTo(dAtA []byte) (int, error)

func (*CertificateSigningRequestCondition) MarshalToSizedBuffer 

func (m *CertificateSigningRequestCondition) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*CertificateSigningRequestCondition) ProtoMessage 

func (*CertificateSigningRequestCondition) ProtoMessage()

func (*CertificateSigningRequestCondition) Reset 

func (m *CertificateSigningRequestCondition) Reset()

func (*CertificateSigningRequestCondition) Size 

func (m *CertificateSigningRequestCondition) Size() (n int)

func (*CertificateSigningRequestCondition) String 

func (this *CertificateSigningRequestCondition) String() string

func (CertificateSigningRequestCondition) SwaggerDoc 

func (CertificateSigningRequestCondition) SwaggerDoc() map[string]string

func (*CertificateSigningRequestCondition) Unmarshal 

func (m *CertificateSigningRequestCondition) Unmarshal(dAtA []byte) error

func (*CertificateSigningRequestCondition) XXX_DiscardUnknown 

func (m *CertificateSigningRequestCondition) XXX_DiscardUnknown()

func (*CertificateSigningRequestCondition) XXX_Marshal 

func (m *CertificateSigningRequestCondition) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertificateSigningRequestCondition) XXX_Merge 

func (m *CertificateSigningRequestCondition) XXX_Merge(src proto.Message)

func (*CertificateSigningRequestCondition) XXX_Size 

func (m *CertificateSigningRequestCondition) XXX_Size() int

func (*CertificateSigningRequestCondition) XXX_Unmarshal 

func (m *CertificateSigningRequestCondition) XXX_Unmarshal(b []byte) error

type CertificateSigningRequestList 

type CertificateSigningRequestList struct {
	metav1.TypeMeta `json:",inline"`
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	Items []CertificateSigningRequest `json:"items" protobuf:"bytes,2,rep,name=items"`
}

func (*CertificateSigningRequestList) APILifecycleDeprecated 

func (in *CertificateSigningRequestList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*CertificateSigningRequestList) APILifecycleIntroduced 

func (in *CertificateSigningRequestList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*CertificateSigningRequestList) APILifecycleRemoved 

func (in *CertificateSigningRequestList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*CertificateSigningRequestList) APILifecycleReplacement 

func (in *CertificateSigningRequestList) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*CertificateSigningRequestList) DeepCopy 

func (in *CertificateSigningRequestList) DeepCopy() *CertificateSigningRequestList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestList.

func (*CertificateSigningRequestList) DeepCopyInto 

func (in *CertificateSigningRequestList) DeepCopyInto(out *CertificateSigningRequestList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateSigningRequestList) DeepCopyObject 

func (in *CertificateSigningRequestList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*CertificateSigningRequestList) Descriptor 

func (*CertificateSigningRequestList) Descriptor() ([]byte, []int)

func (*CertificateSigningRequestList) Marshal 

func (m *CertificateSigningRequestList) Marshal() (dAtA []byte, err error)

func (*CertificateSigningRequestList) MarshalTo 

func (m *CertificateSigningRequestList) MarshalTo(dAtA []byte) (int, error)

func (*CertificateSigningRequestList) MarshalToSizedBuffer 

func (m *CertificateSigningRequestList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*CertificateSigningRequestList) ProtoMessage 

func (*CertificateSigningRequestList) ProtoMessage()

func (*CertificateSigningRequestList) Reset 

func (m *CertificateSigningRequestList) Reset()

func (*CertificateSigningRequestList) Size 

func (m *CertificateSigningRequestList) Size() (n int)

func (*CertificateSigningRequestList) String 

func (this *CertificateSigningRequestList) String() string

func (*CertificateSigningRequestList) Unmarshal 

func (m *CertificateSigningRequestList) Unmarshal(dAtA []byte) error

func (*CertificateSigningRequestList) XXX_DiscardUnknown 

func (m *CertificateSigningRequestList) XXX_DiscardUnknown()

func (*CertificateSigningRequestList) XXX_Marshal 

func (m *CertificateSigningRequestList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertificateSigningRequestList) XXX_Merge 

func (m *CertificateSigningRequestList) XXX_Merge(src proto.Message)

func (*CertificateSigningRequestList) XXX_Size 

func (m *CertificateSigningRequestList) XXX_Size() int

func (*CertificateSigningRequestList) XXX_Unmarshal 

func (m *CertificateSigningRequestList) XXX_Unmarshal(b []byte) error

type CertificateSigningRequestSpec 

type CertificateSigningRequestSpec struct {
	// Base64-encoded PKCS#10 CSR data
	// +listType=atomic
	Request []byte `json:"request" protobuf:"bytes,1,opt,name=request"`

	// Requested signer for the request. It is a qualified name in the form:
	// `scope-hostname.io/name`.
	// If empty, it will be defaulted:
	//  1. If it's a kubelet client certificate, it is assigned
	//     "kubernetes.io/kube-apiserver-client-kubelet".
	//  2. If it's a kubelet serving certificate, it is assigned
	//     "kubernetes.io/kubelet-serving".
	//  3. Otherwise, it is assigned "kubernetes.io/legacy-unknown".
	// Distribution of trust for signers happens out of band.
	// You can select on this field using `spec.signerName`.
	// +optional
	SignerName *string `json:"signerName,omitempty" protobuf:"bytes,7,opt,name=signerName"`

	// expirationSeconds is the requested duration of validity of the issued
	// certificate. The certificate signer may issue a certificate with a different
	// validity duration so a client must check the delta between the notBefore and
	// and notAfter fields in the issued certificate to determine the actual duration.
	//
	// The v1.22+ in-tree implementations of the well-known Kubernetes signers will
	// honor this field as long as the requested duration is not greater than the
	// maximum duration they will honor per the --cluster-signing-duration CLI
	// flag to the Kubernetes controller manager.
	//
	// Certificate signers may not honor this field for various reasons:
	//
	//   1. Old signer that is unaware of the field (such as the in-tree
	//      implementations prior to v1.22)
	//   2. Signer whose configured maximum is shorter than the requested duration
	//   3. Signer whose configured minimum is longer than the requested duration
	//
	// The minimum valid value for expirationSeconds is 600, i.e. 10 minutes.
	//
	// +optional
	ExpirationSeconds *int32 `json:"expirationSeconds,omitempty" protobuf:"varint,8,opt,name=expirationSeconds"`

	// allowedUsages specifies a set of usage contexts the key will be
	// valid for.
	// See:
	//	https://tools.ietf.org/html/rfc5280#section-4.2.1.3
	//	https://tools.ietf.org/html/rfc5280#section-4.2.1.12
	//
	// Valid values are:
	//  "signing",
	//  "digital signature",
	//  "content commitment",
	//  "key encipherment",
	//  "key agreement",
	//  "data encipherment",
	//  "cert sign",
	//  "crl sign",
	//  "encipher only",
	//  "decipher only",
	//  "any",
	//  "server auth",
	//  "client auth",
	//  "code signing",
	//  "email protection",
	//  "s/mime",
	//  "ipsec end system",
	//  "ipsec tunnel",
	//  "ipsec user",
	//  "timestamping",
	//  "ocsp signing",
	//  "microsoft sgc",
	//  "netscape sgc"
	// +listType=atomic
	Usages []KeyUsage `json:"usages,omitempty" protobuf:"bytes,5,opt,name=usages"`

	// Information about the requesting user.
	// See user.Info interface for details.
	// +optional
	Username string `json:"username,omitempty" protobuf:"bytes,2,opt,name=username"`
	// UID information about the requesting user.
	// See user.Info interface for details.
	// +optional
	UID string `json:"uid,omitempty" protobuf:"bytes,3,opt,name=uid"`
	// Group information about the requesting user.
	// See user.Info interface for details.
	// +listType=atomic
	// +optional
	Groups []string `json:"groups,omitempty" protobuf:"bytes,4,rep,name=groups"`
	// Extra information about the requesting user.
	// See user.Info interface for details.
	// +optional
	Extra map[string]ExtraValue `json:"extra,omitempty" protobuf:"bytes,6,rep,name=extra"`
}

CertificateSigningRequestSpec contains the certificate request.

func (*CertificateSigningRequestSpec) DeepCopy 

func (in *CertificateSigningRequestSpec) DeepCopy() *CertificateSigningRequestSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestSpec.

func (*CertificateSigningRequestSpec) DeepCopyInto 

func (in *CertificateSigningRequestSpec) DeepCopyInto(out *CertificateSigningRequestSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateSigningRequestSpec) Descriptor 

func (*CertificateSigningRequestSpec) Descriptor() ([]byte, []int)

func (*CertificateSigningRequestSpec) Marshal 

func (m *CertificateSigningRequestSpec) Marshal() (dAtA []byte, err error)

func (*CertificateSigningRequestSpec) MarshalTo 

func (m *CertificateSigningRequestSpec) MarshalTo(dAtA []byte) (int, error)

func (*CertificateSigningRequestSpec) MarshalToSizedBuffer 

func (m *CertificateSigningRequestSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*CertificateSigningRequestSpec) ProtoMessage 

func (*CertificateSigningRequestSpec) ProtoMessage()

func (*CertificateSigningRequestSpec) Reset 

func (m *CertificateSigningRequestSpec) Reset()

func (*CertificateSigningRequestSpec) Size 

func (m *CertificateSigningRequestSpec) Size() (n int)

func (*CertificateSigningRequestSpec) String 

func (this *CertificateSigningRequestSpec) String() string

func (CertificateSigningRequestSpec) SwaggerDoc 

func (CertificateSigningRequestSpec) SwaggerDoc() map[string]string

func (*CertificateSigningRequestSpec) Unmarshal 

func (m *CertificateSigningRequestSpec) Unmarshal(dAtA []byte) error

func (*CertificateSigningRequestSpec) XXX_DiscardUnknown 

func (m *CertificateSigningRequestSpec) XXX_DiscardUnknown()

func (*CertificateSigningRequestSpec) XXX_Marshal 

func (m *CertificateSigningRequestSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertificateSigningRequestSpec) XXX_Merge 

func (m *CertificateSigningRequestSpec) XXX_Merge(src proto.Message)

func (*CertificateSigningRequestSpec) XXX_Size 

func (m *CertificateSigningRequestSpec) XXX_Size() int

func (*CertificateSigningRequestSpec) XXX_Unmarshal 

func (m *CertificateSigningRequestSpec) XXX_Unmarshal(b []byte) error

type CertificateSigningRequestStatus 

type CertificateSigningRequestStatus struct {
	// Conditions applied to the request, such as approval or denial.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []CertificateSigningRequestCondition `json:"conditions,omitempty" protobuf:"bytes,1,rep,name=conditions"`

	// If request was approved, the controller will place the issued certificate here.
	// +listType=atomic
	// +optional
	Certificate []byte `json:"certificate,omitempty" protobuf:"bytes,2,opt,name=certificate"`
}

func (*CertificateSigningRequestStatus) DeepCopy 

func (in *CertificateSigningRequestStatus) DeepCopy() *CertificateSigningRequestStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateSigningRequestStatus.

func (*CertificateSigningRequestStatus) DeepCopyInto 

func (in *CertificateSigningRequestStatus) DeepCopyInto(out *CertificateSigningRequestStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*CertificateSigningRequestStatus) Descriptor 

func (*CertificateSigningRequestStatus) Descriptor() ([]byte, []int)

func (*CertificateSigningRequestStatus) Marshal 

func (m *CertificateSigningRequestStatus) Marshal() (dAtA []byte, err error)

func (*CertificateSigningRequestStatus) MarshalTo 

func (m *CertificateSigningRequestStatus) MarshalTo(dAtA []byte) (int, error)

func (*CertificateSigningRequestStatus) MarshalToSizedBuffer 

func (m *CertificateSigningRequestStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*CertificateSigningRequestStatus) ProtoMessage 

func (*CertificateSigningRequestStatus) ProtoMessage()

func (*CertificateSigningRequestStatus) Reset 

func (m *CertificateSigningRequestStatus) Reset()

func (*CertificateSigningRequestStatus) Size 

func (m *CertificateSigningRequestStatus) Size() (n int)

func (*CertificateSigningRequestStatus) String 

func (this *CertificateSigningRequestStatus) String() string

func (CertificateSigningRequestStatus) SwaggerDoc 

func (CertificateSigningRequestStatus) SwaggerDoc() map[string]string

func (*CertificateSigningRequestStatus) Unmarshal 

func (m *CertificateSigningRequestStatus) Unmarshal(dAtA []byte) error

func (*CertificateSigningRequestStatus) XXX_DiscardUnknown 

func (m *CertificateSigningRequestStatus) XXX_DiscardUnknown()

func (*CertificateSigningRequestStatus) XXX_Marshal 

func (m *CertificateSigningRequestStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*CertificateSigningRequestStatus) XXX_Merge 

func (m *CertificateSigningRequestStatus) XXX_Merge(src proto.Message)

func (*CertificateSigningRequestStatus) XXX_Size 

func (m *CertificateSigningRequestStatus) XXX_Size() int

func (*CertificateSigningRequestStatus) XXX_Unmarshal 

func (m *CertificateSigningRequestStatus) XXX_Unmarshal(b []byte) error

type ClusterTrustBundle 

type ClusterTrustBundle struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the object metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// spec contains the signer (if any) and trust anchors.
	Spec ClusterTrustBundleSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
}

ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates).

ClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to.

It can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle.

func (*ClusterTrustBundle) APILifecycleDeprecated 

func (in *ClusterTrustBundle) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterTrustBundle) APILifecycleIntroduced 

func (in *ClusterTrustBundle) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterTrustBundle) APILifecycleRemoved 

func (in *ClusterTrustBundle) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterTrustBundle) DeepCopy 

func (in *ClusterTrustBundle) DeepCopy() *ClusterTrustBundle

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterTrustBundle.

func (*ClusterTrustBundle) DeepCopyInto 

func (in *ClusterTrustBundle) DeepCopyInto(out *ClusterTrustBundle)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterTrustBundle) DeepCopyObject 

func (in *ClusterTrustBundle) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterTrustBundle) Descriptor 

func (*ClusterTrustBundle) Descriptor() ([]byte, []int)

func (*ClusterTrustBundle) Marshal 

func (m *ClusterTrustBundle) Marshal() (dAtA []byte, err error)

func (*ClusterTrustBundle) MarshalTo 

func (m *ClusterTrustBundle) MarshalTo(dAtA []byte) (int, error)

func (*ClusterTrustBundle) MarshalToSizedBuffer 

func (m *ClusterTrustBundle) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterTrustBundle) ProtoMessage 

func (*ClusterTrustBundle) ProtoMessage()

func (*ClusterTrustBundle) Reset 

func (m *ClusterTrustBundle) Reset()

func (*ClusterTrustBundle) Size 

func (m *ClusterTrustBundle) Size() (n int)

func (*ClusterTrustBundle) String 

func (this *ClusterTrustBundle) String() string

func (ClusterTrustBundle) SwaggerDoc 

func (ClusterTrustBundle) SwaggerDoc() map[string]string

func (*ClusterTrustBundle) Unmarshal 

func (m *ClusterTrustBundle) Unmarshal(dAtA []byte) error

func (*ClusterTrustBundle) XXX_DiscardUnknown 

func (m *ClusterTrustBundle) XXX_DiscardUnknown()

func (*ClusterTrustBundle) XXX_Marshal 

func (m *ClusterTrustBundle) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterTrustBundle) XXX_Merge 

func (m *ClusterTrustBundle) XXX_Merge(src proto.Message)

func (*ClusterTrustBundle) XXX_Size 

func (m *ClusterTrustBundle) XXX_Size() int

func (*ClusterTrustBundle) XXX_Unmarshal 

func (m *ClusterTrustBundle) XXX_Unmarshal(b []byte) error

type ClusterTrustBundleList 

type ClusterTrustBundleList struct {
	metav1.TypeMeta `json:",inline"`

	// metadata contains the list metadata.
	//
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// items is a collection of ClusterTrustBundle objects
	Items []ClusterTrustBundle `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterTrustBundleList is a collection of ClusterTrustBundle objects

func (*ClusterTrustBundleList) APILifecycleDeprecated 

func (in *ClusterTrustBundleList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterTrustBundleList) APILifecycleIntroduced 

func (in *ClusterTrustBundleList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterTrustBundleList) APILifecycleRemoved 

func (in *ClusterTrustBundleList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterTrustBundleList) DeepCopy 

func (in *ClusterTrustBundleList) DeepCopy() *ClusterTrustBundleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterTrustBundleList.

func (*ClusterTrustBundleList) DeepCopyInto 

func (in *ClusterTrustBundleList) DeepCopyInto(out *ClusterTrustBundleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterTrustBundleList) DeepCopyObject 

func (in *ClusterTrustBundleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterTrustBundleList) Descriptor 

func (*ClusterTrustBundleList) Descriptor() ([]byte, []int)

func (*ClusterTrustBundleList) Marshal 

func (m *ClusterTrustBundleList) Marshal() (dAtA []byte, err error)

func (*ClusterTrustBundleList) MarshalTo 

func (m *ClusterTrustBundleList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterTrustBundleList) MarshalToSizedBuffer 

func (m *ClusterTrustBundleList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterTrustBundleList) ProtoMessage 

func (*ClusterTrustBundleList) ProtoMessage()

func (*ClusterTrustBundleList) Reset 

func (m *ClusterTrustBundleList) Reset()

func (*ClusterTrustBundleList) Size 

func (m *ClusterTrustBundleList) Size() (n int)

func (*ClusterTrustBundleList) String 

func (this *ClusterTrustBundleList) String() string

func (ClusterTrustBundleList) SwaggerDoc 

func (ClusterTrustBundleList) SwaggerDoc() map[string]string

func (*ClusterTrustBundleList) Unmarshal 

func (m *ClusterTrustBundleList) Unmarshal(dAtA []byte) error

func (*ClusterTrustBundleList) XXX_DiscardUnknown 

func (m *ClusterTrustBundleList) XXX_DiscardUnknown()

func (*ClusterTrustBundleList) XXX_Marshal 

func (m *ClusterTrustBundleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterTrustBundleList) XXX_Merge 

func (m *ClusterTrustBundleList) XXX_Merge(src proto.Message)

func (*ClusterTrustBundleList) XXX_Size 

func (m *ClusterTrustBundleList) XXX_Size() int

func (*ClusterTrustBundleList) XXX_Unmarshal 

func (m *ClusterTrustBundleList) XXX_Unmarshal(b []byte) error

type ClusterTrustBundleSpec 

type ClusterTrustBundleSpec struct {
	// signerName indicates the associated signer, if any.
	//
	// In order to create or update a ClusterTrustBundle that sets signerName,
	// you must have the following cluster-scoped permission:
	// group=certificates.k8s.io resource=signers resourceName=<the signer name>
	// verb=attest.
	//
	// If signerName is not empty, then the ClusterTrustBundle object must be
	// named with the signer name as a prefix (translating slashes to colons).
	// For example, for the signer name `example.com/foo`, valid
	// ClusterTrustBundle object names include `example.com:foo:abc` and
	// `example.com:foo:v1`.
	//
	// If signerName is empty, then the ClusterTrustBundle object's name must
	// not have such a prefix.
	//
	// List/watch requests for ClusterTrustBundles can filter on this field
	// using a `spec.signerName=NAME` field selector.
	//
	// +optional
	SignerName string `json:"signerName,omitempty" protobuf:"bytes,1,opt,name=signerName"`

	// trustBundle contains the individual X.509 trust anchors for this
	// bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates.
	//
	// The data must consist only of PEM certificate blocks that parse as valid
	// X.509 certificates.  Each certificate must include a basic constraints
	// extension with the CA bit set.  The API server will reject objects that
	// contain duplicate certificates, or that use PEM block headers.
	//
	// Users of ClusterTrustBundles, including Kubelet, are free to reorder and
	// deduplicate certificate blocks in this file according to their own logic,
	// as well as to drop PEM block headers and inter-block data.
	TrustBundle string `json:"trustBundle" protobuf:"bytes,2,opt,name=trustBundle"`
}

ClusterTrustBundleSpec contains the signer and trust anchors.

func (*ClusterTrustBundleSpec) DeepCopy 

func (in *ClusterTrustBundleSpec) DeepCopy() *ClusterTrustBundleSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterTrustBundleSpec.

func (*ClusterTrustBundleSpec) DeepCopyInto 

func (in *ClusterTrustBundleSpec) DeepCopyInto(out *ClusterTrustBundleSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterTrustBundleSpec) Descriptor 

func (*ClusterTrustBundleSpec) Descriptor() ([]byte, []int)

func (*ClusterTrustBundleSpec) Marshal 

func (m *ClusterTrustBundleSpec) Marshal() (dAtA []byte, err error)

func (*ClusterTrustBundleSpec) MarshalTo 

func (m *ClusterTrustBundleSpec) MarshalTo(dAtA []byte) (int, error)

func (*ClusterTrustBundleSpec) MarshalToSizedBuffer 

func (m *ClusterTrustBundleSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterTrustBundleSpec) ProtoMessage 

func (*ClusterTrustBundleSpec) ProtoMessage()

func (*ClusterTrustBundleSpec) Reset 

func (m *ClusterTrustBundleSpec) Reset()

func (*ClusterTrustBundleSpec) Size 

func (m *ClusterTrustBundleSpec) Size() (n int)

func (*ClusterTrustBundleSpec) String 

func (this *ClusterTrustBundleSpec) String() string

func (ClusterTrustBundleSpec) SwaggerDoc 

func (ClusterTrustBundleSpec) SwaggerDoc() map[string]string

func (*ClusterTrustBundleSpec) Unmarshal 

func (m *ClusterTrustBundleSpec) Unmarshal(dAtA []byte) error

func (*ClusterTrustBundleSpec) XXX_DiscardUnknown 

func (m *ClusterTrustBundleSpec) XXX_DiscardUnknown()

func (*ClusterTrustBundleSpec) XXX_Marshal 

func (m *ClusterTrustBundleSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterTrustBundleSpec) XXX_Merge 

func (m *ClusterTrustBundleSpec) XXX_Merge(src proto.Message)

func (*ClusterTrustBundleSpec) XXX_Size 

func (m *ClusterTrustBundleSpec) XXX_Size() int

func (*ClusterTrustBundleSpec) XXX_Unmarshal 

func (m *ClusterTrustBundleSpec) XXX_Unmarshal(b []byte) error

type ExtraValue 

type ExtraValue []string

ExtraValue masks the value so protobuf can generate +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false

func (ExtraValue) DeepCopy 

func (in ExtraValue) DeepCopy() ExtraValue

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExtraValue.

func (ExtraValue) DeepCopyInto 

func (in ExtraValue) DeepCopyInto(out *ExtraValue)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ExtraValue) Descriptor 

func (*ExtraValue) Descriptor() ([]byte, []int)

func (ExtraValue) Marshal 

func (m ExtraValue) Marshal() (dAtA []byte, err error)

func (ExtraValue) MarshalTo 

func (m ExtraValue) MarshalTo(dAtA []byte) (int, error)

func (ExtraValue) MarshalToSizedBuffer 

func (m ExtraValue) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ExtraValue) ProtoMessage 

func (*ExtraValue) ProtoMessage()

func (*ExtraValue) Reset 

func (m *ExtraValue) Reset()

func (ExtraValue) Size 

func (m ExtraValue) Size() (n int)

func (ExtraValue) String 

func (t ExtraValue) String() string

func (*ExtraValue) Unmarshal 

func (m *ExtraValue) Unmarshal(dAtA []byte) error

func (*ExtraValue) XXX_DiscardUnknown 

func (m *ExtraValue) XXX_DiscardUnknown()

func (*ExtraValue) XXX_Marshal 

func (m *ExtraValue) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ExtraValue) XXX_Merge 

func (m *ExtraValue) XXX_Merge(src proto.Message)

func (*ExtraValue) XXX_Size 

func (m *ExtraValue) XXX_Size() int

func (*ExtraValue) XXX_Unmarshal 

func (m *ExtraValue) XXX_Unmarshal(b []byte) error

type KeyUsage 

type KeyUsage string

KeyUsages specifies valid usage contexts for keys. See: 

https://tools.ietf.org/html/rfc5280#section-4.2.1.3
https://tools.ietf.org/html/rfc5280#section-4.2.1.12

const (
	UsageSigning           KeyUsage = "signing"
	UsageDigitalSignature  KeyUsage = "digital signature"
	UsageContentCommitment KeyUsage = "content commitment"
	UsageKeyEncipherment   KeyUsage = "key encipherment"
	UsageKeyAgreement      KeyUsage = "key agreement"
	UsageDataEncipherment  KeyUsage = "data encipherment"
	UsageCertSign          KeyUsage = "cert sign"
	UsageCRLSign           KeyUsage = "crl sign"
	UsageEncipherOnly      KeyUsage = "encipher only"
	UsageDecipherOnly      KeyUsage = "decipher only"
	UsageAny               KeyUsage = "any"
	UsageServerAuth        KeyUsage = "server auth"
	UsageClientAuth        KeyUsage = "client auth"
	UsageCodeSigning       KeyUsage = "code signing"
	UsageEmailProtection   KeyUsage = "email protection"
	UsageSMIME             KeyUsage = "s/mime"
	UsageIPsecEndSystem    KeyUsage = "ipsec end system"
	UsageIPsecTunnel       KeyUsage = "ipsec tunnel"
	UsageIPsecUser         KeyUsage = "ipsec user"
	UsageTimestamping      KeyUsage = "timestamping"
	UsageOCSPSigning       KeyUsage = "ocsp signing"
	UsageMicrosoftSGC      KeyUsage = "microsoft sgc"
	UsageNetscapeSGC       KeyUsage = "netscape sgc"
)

type RequestConditionType 

type RequestConditionType string
const (
	CertificateApproved RequestConditionType = "Approved"
	CertificateDenied   RequestConditionType = "Denied"
	CertificateFailed   RequestConditionType = "Failed"
)

These are the possible conditions for a certificate request.

Source Files

doc.go generated.pb.go register.go types.go types_swagger_doc_generated.go zz_generated.deepcopy.go zz_generated.prerelease-lifecycle.go

Version
v0.33.0 (latest)
Published
Apr 23, 2025
Platform
linux/amd64
Imports
12 packages
Last checked
3 days ago –

Tools for package owners.