Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Files ¶
type Files struct {
CA string
CAKey string
ServerCert string
ServerKey string
ClientCert string
ClientKey string
}
func Ensure ¶
Ensure creates and maintains the BaseHarbor-owned etcd PKI. Leaf certificates are rotated under the existing CA before expiry. CA rotation is deliberately fail-closed because changing etcd trust roots requires a fenced cluster migration and must never happen as a side effect of ordinary reconciliation.
Click to show internal directories.
Click to hide internal directories.