defaults

const (
	// Debug enables debug messages.
	Debug = false

	// K8sRequestTimeout specifies the timeout for K8s API requests.
	K8sRequestTimeout = 60 * time.Second

	// CAGenerate can be set to true to generate a new CA secret.
	// If CAReuseSecret is true, then a new CA secret only is created if
	// existing one is not found.
	CAGenerate = false
	// CAReuseSecret can be set to true to store and load the CA from
	// the secret if it exists. Setting to false will delete the old Secret and
	// force regeneration.
	CAReuseSecret = false
	// CACommonName is the CA x509 certificate CN value.
	CACommonName = "CA"
	// CAValidityDuration represent how much time the CA certificate
	// generated by certgen is valid.
	CAValidityDuration = 3 * 365 * 24 * time.Hour
	// CASecretName is the Kubernetes Secret in which the CA certificate
	// is read from and/or written to.
	CASecretName = "ca"
	// CASecretNamespace is the namespace in which the CA certificate is
	// read from and/or written to.
	CASecretNamespace = "kube-system"
	// CAConfigMapName is the Kubernetes ConfigMap in which the CA certificate is
	// or written to.
	CAConfigMapName = ""
	// CAConfigMapNamespace is the namespace in which the CA certificate is
	// written to.
	CAConfigMapNamespace = ""
	// CAEnforceValidityThroughoutLeavesDuration controls whether certgen strictly
	// enforces that the CA certificates remain valid throughput the entire duration
	// of the leaf certificates to be generated.
	CAEnforceValidityThroughoutLeavesDuration = false
)