csr

type AndFilter struct {
	// contains filtered or unexported fields
}

type CSRApprovalDecision string

type CSRApprover interface {
	Approve(csrObj *certapiv1.CertificateSigningRequest, x509CSR *x509.CertificateRequest) (approvalStatus CSRApprovalDecision, denyReason string, err error)
}

type CSRFilter interface {
	Matches(csr *certapiv1.CertificateSigningRequest) bool
}

type CSROption struct {
	// ObjectMeta is the ObjectMeta shared by all created csrs. It should use GenerateName instead of Name
	// to generate random csr names
	ObjectMeta metav1.ObjectMeta
	// Subject represents the subject of the client certificate used to create csrs
	Subject *pkix.Name
	// DNSNames represents DNS names used to create the client certificate
	DNSNames []string
	// SignerName is the name of the signer specified in the created csrs
	SignerName string

	// EventFilterFunc matches csrs created with above options
	EventFilterFunc factory.EventFilterFunc
}

type ClientCertOption struct {
	// SecretNamespace is the namespace of the secret containing client certificate.
	SecretNamespace string
	// SecretName is the name of the secret containing client certificate. The secret will be created if
	// it does not exist.
	SecretName string
	// AdditonalSecretData contains data that will be added into client certificate secret besides tls.key/tls.crt
	AdditonalSecretData map[string][]byte
	// AdditionalAnnotations is a collection of annotations set for the secret
	AdditionalAnnotations certrotation.AdditionalAnnotations
}

type LabelFilter struct {
	// contains filtered or unexported fields
}

type NamesFilter struct {
	// contains filtered or unexported fields
}

type OrFilter struct {
	// contains filtered or unexported fields
}

type RequestCommonNameFilter struct {
	// contains filtered or unexported fields
}

type ServiceAccountApprover struct {
	// contains filtered or unexported fields
}