cert

type CertBytes struct {
	Crt []byte
	Key []byte
}

type CertConfig struct {
	CN           string // Common Name
	Organization string
	DNS          []string
	IPs          []string
	IsCa         bool
	KeyUsage     x509.KeyUsage
	ExtKeyUsage  []x509.ExtKeyUsage
	NotAfter     time.Time
}

type CertKeyPair struct {
	Crt *x509.Certificate
	Key *rsa.PrivateKey
}

type CertLoader interface {
	GetCertificateAndCaPool() (*tls.Certificate, *x509.CertPool, error)
}

type CertPath struct {
	Base     string
	CertFile string
	KeyFile  string // Not Required if CertOnly:true
	CertOnly bool   // if true read certificate only
}

type ExternalCertLoader struct {
	CaCertPath CertPath
	CertPath   CertPath
}

type K8sCertLoader struct {
	CertConfig CertConfig
	K8sClient  *kubernetes.Clientset
	Namespace  string
	Secret     string
}

type SelfSignedCertLoader struct {
	CaCertPath CertPath
	CertConfig CertConfig
}

type TlsConfig struct {
	// Server/Client Certificate Configurations
	CertCfg CertConfig
	// If CA is Provided Using a K8s Secret
	// Namespace, Secret and K8sClient are Required
	ReadCACertFromSecret bool
	Secret               string
	Namespace            string
	K8sClient            *kubernetes.Clientset

	CACertPath CertPath
	CertPath   CertPath
	// Source of Client/Server Certificate,
	// "self" : Certificates Will be Generated Dynamically
	// "external": Certificates Are Provided Using File
	CertProvider string
}

type TlsCredentialManager struct {
	CertLoader CertLoader
}