kube

func ParseTLSKeyFromSecret ¶ added in v0.15.0

func ParseTLSKeyFromSecret(secret *corev1.Secret, keyName string) (crypto.Signer, []byte, error)

ParseTLSKeyFromSecret will parse and decode a private key from the given Secret at the given key index.

func SecretTLSCert ¶

func SecretTLSCert(ctx context.Context, secretLister corelisters.SecretLister, namespace, name string) (*x509.Certificate, error)

func SecretTLSCertChain ¶ added in v0.6.0

func SecretTLSCertChain(ctx context.Context, secretLister corelisters.SecretLister, namespace, name string) ([]*x509.Certificate, error)

func SecretTLSKey ¶

func SecretTLSKey(ctx context.Context, secretLister corelisters.SecretLister, namespace, name string) (crypto.Signer, error)

SecretTLSKey will decode a PKCS1/SEC1 (in effect, a RSA or ECDSA) private key stored in a secret with 'name' in 'namespace'. It will read the private key data from the secret entry with name 'keyName'.

func SecretTLSKeyPair ¶ added in v0.6.0

func SecretTLSKeyPair(ctx context.Context, secretLister corelisters.SecretLister, namespace, name string) ([]*x509.Certificate, crypto.Signer, error)

func SecretTLSKeyPairAndCA ¶ added in v1.4.0

func SecretTLSKeyPairAndCA(ctx context.Context, secretLister corelisters.SecretLister, namespace, name string) ([]*x509.Certificate, crypto.Signer, error)

SecretTLSKeyPairAndCA returns the X.509 certificate chain and private key of the leaf certificate contained in the target Secret. If the ca.crt field exists on the Secret, it is parsed and added to the end of the certificate chain.

func SecretTLSKeyRef ¶

func SecretTLSKeyRef(ctx context.Context, secretLister corelisters.SecretLister, namespace, name, keyName string) (crypto.Signer, error)

SecretTLSKeyRef will decode a PKCS1/SEC1 (in effect, a RSA or ECDSA) private key stored in a secret with 'name' in 'namespace'. It will read the private key data from the secret entry with name 'keyName'.