tls

package

v1.12.1 Latest Latest Go to latest Published: May 3, 2024 License: Apache-2.0 Imports: 16 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/kyverno/kyverno

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func NewCertRenewer(client client, ...) *certRenewer
func ReadRootCASecret(name, namespace string, client corev1listers.SecretNamespaceLister) ([]byte, error)
type CertRenewer
type CertValidator

Constants ¶

View Source

const (
	// CertRenewalInterval is the renewal interval for rootCA
	CertRenewalInterval = 12 * time.Hour
	// CAValidityDuration is the valid duration for CA certificates
	CAValidityDuration = 365 * 24 * time.Hour
	// TLSValidityDuration is the valid duration for TLS certificates
	TLSValidityDuration = 150 * 24 * time.Hour
)

Variables ¶

This section is empty.

Functions ¶

func NewCertRenewer ¶ added in v1.3.5

func NewCertRenewer(
	client client,
	certRenewalInterval,
	caValidityDuration,
	tlsValidityDuration,
	renewBefore time.Duration,
	server string,
	commonName string,
	dnsNames []string,
	namespace string,
	caSecret string,
	pairSecret string,
) *certRenewer

NewCertRenewer returns an instance of CertRenewer

func ReadRootCASecret ¶ added in v1.3.5

func ReadRootCASecret(name, namespace string, client corev1listers.SecretNamespaceLister) ([]byte, error)

ReadRootCASecret returns the RootCA from the pre-defined secret

Types ¶

type CertRenewer ¶ added in v1.3.5

type CertRenewer interface {
	// RenewCA renews the CA certificate if needed
	RenewCA(context.Context) error
	// RenewTLS renews the TLS certificate if needed
	RenewTLS(context.Context) error
}

type CertValidator ¶ added in v1.8.1

type CertValidator interface {
	// ValidateCert checks the certificates validity
	ValidateCert(context.Context) (bool, error)
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL