option

type CertGenConfig struct {
	// Debug enables debug messages.
	Debug bool

	// K8sKubeConfigPath is the path to the kubeconfig If empty, the in-cluster
	// configuration is used.
	K8sKubeConfigPath string
	// K8sRequestTimeout specifies the timeout for K8s API requests
	K8sRequestTimeout time.Duration

	// CACertFile is the path to the CA cert PEM (if CAGenerate is false).
	CACertFile string
	// CAKeyFile is the path to the CA key PEM (if CAGenerate is false).
	CAKeyFile string

	// CAGenerate can be set to true to generate a new CA secret.  If
	// CAReuseSecret is true, then a new CA secret only is created if existing
	// one is not found.
	CAGenerate bool
	// CAReuseSecret can be set to true to store and load the CA from
	// the secret if it exists. Setting to false will delete the old Secret and
	// force regeneration.
	CAReuseSecret bool
	// CACommonName is the CA x509 certificate CN value.
	CACommonName string
	// CAValidityDuration represent how much time the CA certificate
	// generated by certgen is valid.
	CAValidityDuration time.Duration
	// CASecretName is the Kubernetes Secret in which the CA certificate
	// is read from and/or written to.
	CASecretName string
	// CASecretNamespace is the Kubernetes Namespace in which the CA
	// Secret will be stored.
	CASecretNamespace string
	// CAConfigMapName is the Kubernetes ConfigMap in which the CA certificate
	// is written to.
	CAConfigMapName string
	// CAConfigMapNamespace is the Kubernetes Namespace in which the CA ConfigMap
	// will be stored.
	CAConfigMapNamespace string
	// CAEnforceValidityThroughoutLeavesDuration controls whether certgen strictly
	// enforces that the CA certificates remain valid throughput the entire duration
	// of the leaf certificates to be generated.
	CAEnforceValidityThroughoutLeavesDuration bool

	// CertsConfig is the yaml configuration describing the certificates to
	// generate. It takes precedence over config-file if both are specified.
	CertsConfig string
	// CertsConfigFile is the file containing the yaml configuration describing
	// the certificates to generate.
	CertsConfigFile string
}

type CertificateConfig struct {
	Name       string        `yaml:"name"`
	Namespace  string        `yaml:"namespace"`
	CommonName string        `yaml:"commonName"`
	Hosts      []string      `yaml:"hosts"`
	Usage      []string      `yaml:"usage"`
	Validity   time.Duration `yaml:"validity"`
}

type CertificateConfigs struct {
	Certs []CertificateConfig `yaml:"certs"`
}