certinit

type CertClient struct {
	Pods         MinPods
	Services     MinServices
	Certificates MinCertificates
}

type MinCertificates interface {
	Create(ctx context.Context, certificateSigningRequest *capi.CertificateSigningRequest, opts metaV1.CreateOptions) (*capi.CertificateSigningRequest, error)
	Get(ctx context.Context, name string, opts metaV1.GetOptions) (*capi.CertificateSigningRequest, error)
}

type MinPods interface {
	Get(ctx context.Context, name string, opts metaV1.GetOptions) (*v1.Pod, error)
}

type MinServices interface {
	List(ctx context.Context, opts metaV1.ListOptions) (*v1.ServiceList, error)
}

type Request struct {
	// Namespace as defined by pod.metadata.namespace
	Namespace string
	// PodName name as defined by pod.metadata.name
	PodName string
	// CertDir is directory where the TLS certs should be written
	CertDir string
	// ClusterDomain specifies kubernetes cluster domain
	ClusterDomain string
	// Labels to include in CertificateSigningRequest object; comma separated list of key=value
	Labels string
	// QueryK8s specifies to query kubernetes for names appropriate to this Pod
	QueryK8s bool
	// SAN is additional comma separated DNS, IP, URI or Emails to include in SAN
	SAN string
	// ServiceNames lists Services in the Pod's namespace that resolve to this
	// Pod; comma separated. Each name is added to the SAN as
	// <name>.<namespace>.svc.<cluster-domain> and, with IncludeUnqualified,
	// <name>.<namespace>.svc.
	ServiceNames string
	// IncludeUnqualified specifies to include unqualified .svc domains in names from --query-k8s
	IncludeUnqualified bool
	// SignerName specifies the signer name
	SignerName string
	// Usages overrides the Kubernetes key usages requested in the CSR; comma
	// separated certificates.k8s.io KeyUsage values. Required for a profile
	// other than peer, server or client. The CA ignores them and applies the
	// profile's usages.
	Usages string
	// contains filtered or unexported fields
}