Documentation
¶
Overview ¶
Package selfmanaged provides a TLSBackend that generates and manages CA and leaf certificates using Go's crypto/x509 standard library. It supports multi-cycle CA rotation via the WorkflowStep saga.
Index ¶
Constants ¶
View Source
const ( // CASecretSuffix is appended to the SecretName for the CA certificate Secret. CASecretSuffix = "-ca" // CAKey is the key in the Secret data for the CA certificate PEM. CAKey = "ca.crt" // CertKey is the key in the Secret data for the leaf certificate PEM. CertKey = "tls.crt" // KeyKey is the key in the Secret data for the private key PEM. KeyKey = "tls.key" // CAKeyPrivate is the key for the CA private key PEM (kept in a separate Secret). CAKeyPrivate = "ca.key" )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type SelfManagedBackend ¶
type SelfManagedBackend[T object.MultiPhaseObject] struct{}
SelfManagedBackend is a TLSBackend that generates CA and leaf certificates using Go's crypto/x509 standard library.
func NewSelfManagedBackend ¶
func NewSelfManagedBackend[T object.MultiPhaseObject]() *SelfManagedBackend[T]
NewSelfManagedBackend creates a new self-managed backend.
func (*SelfManagedBackend[T]) CertificateSecretName ¶
func (b *SelfManagedBackend[T]) CertificateSecretName(o T, spec certificate.TLSSpec) string
CertificateSecretName returns the name of the leaf certificate Secret.
func (*SelfManagedBackend[T]) DesiredObjects ¶
func (b *SelfManagedBackend[T]) DesiredObjects(ctx context.Context, o T, spec certificate.TLSSpec) ([]client.Object, error)
DesiredObjects generates CA and leaf certificates and returns them as Kubernetes Secret objects for SSA reconciliation.
func (*SelfManagedBackend[T]) RequiresRotationSaga ¶
func (b *SelfManagedBackend[T]) RequiresRotationSaga() bool
RequiresRotationSaga returns true for the self-managed backend.
Source Files
Click to show internal directories.
Click to hide internal directories.