Versions in this module Expand all Collapse all v0 v0.11.0 Oct 25, 2026 v0.10.0 Oct 20, 2026 Changes in this version + const MaxBootstrapLifetime + var ErrDenied = errors.New("management enrollment denied") + var ErrUnavailable = errors.New("management enrollment unavailable") + type BootstrapImporter struct + func NewBootstrapImporter(client dynamic.Interface, namespace string, resolver *KubernetesResolver, ...) (*BootstrapImporter, error) + func (b *BootstrapImporter) Import(ctx context.Context, namespace, name string) error + type CurrentIdentity func(context.Context, pki.Identity) error + type KubernetesResolver struct + func NewKubernetesResolver(client dynamic.Interface, policy executionPolicyReader) (*KubernetesResolver, error) + func (r *KubernetesResolver) Authorize(ctx context.Context, expected pki.Identity) error + func (r *KubernetesResolver) Resolve(ctx context.Context, namespace, name string) (pki.Identity, error) + type Service struct + func New(store storage.EnrollmentStore, issuer *pki.Authority, current CurrentIdentity, ...) (*Service, error) + func (s *Service) Enroll(ctx context.Context, token string, csrDER []byte) ([]byte, error) + func (s *Service) EnrollBound(ctx context.Context, expected pki.Identity, token string, csrDER []byte) ([]byte, error) + func (s *Service) Mint(ctx context.Context, identity pki.Identity, lifetime time.Duration) (string, error) + func (s *Service) Register(ctx context.Context, i pki.Identity, token string, expiresAt time.Time) error