Documentation
¶
Index ¶
- func NewAPIServerCertAndKey(cfg *kubeadmapi.MasterConfiguration, caCert *x509.Certificate, ...) (*x509.Certificate, *rsa.PrivateKey, error)
- func NewAPIServerKubeletClientCertAndKey(caCert *x509.Certificate, caKey *rsa.PrivateKey) (*x509.Certificate, *rsa.PrivateKey, error)
- func NewCACertAndKey() (*x509.Certificate, *rsa.PrivateKey, error)
- func NewFrontProxyCACertAndKey() (*x509.Certificate, *rsa.PrivateKey, error)
- func NewFrontProxyClientCertAndKey(frontProxyCACert *x509.Certificate, frontProxyCAKey *rsa.PrivateKey) (*x509.Certificate, *rsa.PrivateKey, error)
- func NewServiceAccountSigningKey() (*rsa.PrivateKey, error)
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewAPIServerCertAndKey ¶
func NewAPIServerCertAndKey(cfg *kubeadmapi.MasterConfiguration, caCert *x509.Certificate, caKey *rsa.PrivateKey) (*x509.Certificate, *rsa.PrivateKey, error)
NewAPIServerCertAndKey generate CA certificate for apiserver, signed by the given CA.
func NewAPIServerKubeletClientCertAndKey ¶
func NewAPIServerKubeletClientCertAndKey(caCert *x509.Certificate, caKey *rsa.PrivateKey) (*x509.Certificate, *rsa.PrivateKey, error)
NewAPIServerKubeletClientCertAndKey generate CA certificate for the apiservers to connect to the kubelets securely, signed by the given CA.
func NewCACertAndKey ¶
func NewCACertAndKey() (*x509.Certificate, *rsa.PrivateKey, error)
NewCACertAndKey will generate a self signed CA.
func NewFrontProxyCACertAndKey ¶
func NewFrontProxyCACertAndKey() (*x509.Certificate, *rsa.PrivateKey, error)
NewFrontProxyCACertAndKey generate a self signed front proxy CA. Front proxy CA and client certs are used to secure a front proxy authenticator which is used to assert identity without the client cert. This is a separte CA, so that front proxy identities cannot hit the API and normal client certs cannot be used as front proxies.
func NewFrontProxyClientCertAndKey ¶
func NewFrontProxyClientCertAndKey(frontProxyCACert *x509.Certificate, frontProxyCAKey *rsa.PrivateKey) (*x509.Certificate, *rsa.PrivateKey, error)
NewFrontProxyClientCertAndKey generate CA certificate for proxy server client, signed by the given front proxy CA.
func NewServiceAccountSigningKey ¶
func NewServiceAccountSigningKey() (*rsa.PrivateKey, error)
NewServiceAccountSigningKey generate public/private key pairs for signing service account tokens.
Types ¶
This section is empty.
Source Files
Directories