package hermeticpodcertificatesigner

import "k8s.io/kubernetes/test/utils/hermeticpodcertificatesigner"

Index ¶

• Constants
• func GenerateCAHierarchy(numIntermediates int) ([]crypto.PrivateKey, [][]byte, error)
• type Controller
• func New(clock clock.PassiveClock, signerName string, caKeys []crypto.PrivateKey, caCerts [][]byte, kc kubernetes.Interface) *Controller
• func (c *Controller) Run(ctx context.Context)

Constants ¶

const SpiffePathKey = "spiffe/path-overriding"

Functions ¶

func GenerateCAHierarchy ¶

func GenerateCAHierarchy(numIntermediates int) ([]crypto.PrivateKey, [][]byte, error)

GenerateCAHierarchy makes a CA hierarchy, possibly with intermediates. The outputs can be used with Controller.

Types ¶

type Controller ¶

type Controller struct {
	// contains filtered or unexported fields
}

Controller is an in-memory signing controller for PodCertificateRequests.

func New ¶

func New(clock clock.PassiveClock, signerName string, caKeys []crypto.PrivateKey, caCerts [][]byte, kc kubernetes.Interface) *Controller

New creates a new Controller.

func (*Controller) Run ¶

func (c *Controller) Run(ctx context.Context)

Source Files ¶

hermeticpodcertificatesigner.go