Documentation
¶
Index ¶
- Constants
- func BindSignerCertOptions(options *SignerCertOptions, flags *pflag.FlagSet, prefix string)
- func DefaultAPIClientCAFile(certDir string) string
- func DefaultCABundleFile(certDir string) string
- func DefaultCAFilename(certDir, prefix string) string
- func DefaultCertFilename(certDir, prefix string) string
- func DefaultEtcdClientCAFile(certDir string) string
- func DefaultEtcdServingCertInfo(certDir string) configapi.CertInfo
- func DefaultFrontProxySignerName() string
- func DefaultKeyFilename(certDir, prefix string) string
- func DefaultKubeConfigFilename(certDir, prefix string) string
- func DefaultKubeletClientCAFile(certDir string) string
- func DefaultMasterServingCertInfo(certDir string) configapi.CertInfo
- func DefaultNodeClientCertInfo(nodeDir string) configapi.CertInfo
- func DefaultNodeDir(nodeName string) string
- func DefaultNodeKubeConfigFile(nodeDir string) string
- func DefaultNodeServingCertInfo(nodeDir string) configapi.CertInfo
- func DefaultRootCAFile(certDir string) string
- func DefaultSerialFilename(certDir, prefix string) string
- func DefaultServerCerts(certDir string) []configapi.CertInfo
- func DefaultServiceAccountPrivateKeyFile(certDir string) string
- func DefaultServiceAccountPublicKeyFile(certDir string) string
- func DefaultServiceServingCertSignerName() string
- func DefaultServiceSignerCAInfo(certDir string) configapi.CertInfo
- func DefaultSignerName() string
- func NewCommandCreateBootstrapPolicyFile(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandCreateClient(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandCreateKeyPair(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandCreateKubeConfig(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandCreateMasterCerts(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandCreateServerCert(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandCreateSignerCert(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- func NewCommandDecrypt(commandName string, fullName, encryptFullName string, ...) *cobra.Command
- func NewCommandEncrypt(commandName string, fullName string, streams genericclioptions.IOStreams) *cobra.Command
- type ClientCertInfo
- func DefaultAPIClientCerts(certDir string) []ClientCertInfo
- func DefaultAggregatorClientCertInfo(certDir string) ClientCertInfo
- func DefaultClusterAdminClientCertInfo(certDir string) ClientCertInfo
- func DefaultEtcdClientCerts(certDir string) []ClientCertInfo
- func DefaultKubeletClientCerts(certDir string) []ClientCertInfo
- func DefaultMasterEtcdClientCertInfo(certDir string) ClientCertInfo
- func DefaultMasterKubeletClientCertInfo(certDir string) ClientCertInfo
- func DefaultOpenshiftLoopbackClientCertInfo(certDir string) ClientCertInfo
- func DefaultProxyClientCertInfo(certDir string) ClientCertInfo
- func DefaultProxyClientCerts(certDir string) []ClientCertInfo
- type CreateBootstrapPolicyFileOptions
- type CreateClientCertOptions
- type CreateClientOptions
- type CreateKeyPairOptions
- type CreateKubeConfigOptions
- type CreateMasterCertsOptions
- type CreateServerCertOptions
- type CreateSignerCertOptions
- type DecryptOptions
- type EncryptOptions
- type SignerCertOptions
Constants ¶
View Source
const ( DefaultPolicyFile = "openshift.local.config/master/policy.json" CreateBootstrapPolicyFileCommand = "create-bootstrap-policy-file" )
View Source
const ( CAFilePrefix = "ca" CABundlePrefix = "ca-bundle" MasterFilePrefix = "master" FrontProxyCAFilePrefix = "frontproxy-ca" )
View Source
const CreateClientCommandName = "create-api-client-config"
View Source
const CreateKeyPairCommandName = "create-key-pair"
View Source
const CreateKubeConfigCommandName = "create-kubeconfig"
View Source
const CreateMasterCertsCommandName = "create-master-certs"
View Source
const CreateServerCertCommandName = "create-server-cert"
View Source
const CreateSignerCertCommandName = "create-signer-cert"
View Source
const DecryptCommandName = "decrypt"
View Source
const EncryptCommandName = "encrypt"
Variables ¶
This section is empty.
Functions ¶
func BindSignerCertOptions ¶
func BindSignerCertOptions(options *SignerCertOptions, flags *pflag.FlagSet, prefix string)
func DefaultEtcdServingCertInfo ¶
func DefaultMasterServingCertInfo ¶
func DefaultNodeServingCertInfo ¶
func DefaultServiceAccountPrivateKeyFile ¶
func DefaultServiceAccountPublicKeyFile ¶
func DefaultServiceServingCertSignerName ¶ added in v1.3.0
func DefaultServiceServingCertSignerName() string
func DefaultServiceSignerCAInfo ¶ added in v1.3.0
func NewCommandCreateBootstrapPolicyFile ¶
func NewCommandCreateClient ¶
func NewCommandCreateKeyPair ¶
func NewCommandCreateKubeConfig ¶
func NewCommandCreateMasterCerts ¶
func NewCommandCreateServerCert ¶
func NewCommandCreateSignerCert ¶
func NewCommandDecrypt ¶ added in v1.1.4
Types ¶
type ClientCertInfo ¶
type ClientCertInfo struct {
CertLocation configapi.CertInfo
UnqualifiedUser string
User string
Groups sets.String
}
func DefaultAPIClientCerts ¶
func DefaultAPIClientCerts(certDir string) []ClientCertInfo
func DefaultAggregatorClientCertInfo ¶
func DefaultAggregatorClientCertInfo(certDir string) ClientCertInfo
func DefaultClusterAdminClientCertInfo ¶
func DefaultClusterAdminClientCertInfo(certDir string) ClientCertInfo
func DefaultEtcdClientCerts ¶
func DefaultEtcdClientCerts(certDir string) []ClientCertInfo
func DefaultKubeletClientCerts ¶
func DefaultKubeletClientCerts(certDir string) []ClientCertInfo
func DefaultMasterEtcdClientCertInfo ¶
func DefaultMasterEtcdClientCertInfo(certDir string) ClientCertInfo
func DefaultMasterKubeletClientCertInfo ¶
func DefaultMasterKubeletClientCertInfo(certDir string) ClientCertInfo
func DefaultOpenshiftLoopbackClientCertInfo ¶
func DefaultOpenshiftLoopbackClientCertInfo(certDir string) ClientCertInfo
func DefaultProxyClientCertInfo ¶ added in v1.0.7
func DefaultProxyClientCertInfo(certDir string) ClientCertInfo
func DefaultProxyClientCerts ¶ added in v1.0.7
func DefaultProxyClientCerts(certDir string) []ClientCertInfo
type CreateBootstrapPolicyFileOptions ¶
type CreateBootstrapPolicyFileOptions struct {
File string
genericclioptions.IOStreams
}
func NewCreateBootstrapPolicyFileOptions ¶
func NewCreateBootstrapPolicyFileOptions(streams genericclioptions.IOStreams) *CreateBootstrapPolicyFileOptions
func (CreateBootstrapPolicyFileOptions) Run ¶
func (o CreateBootstrapPolicyFileOptions) Run() error
func (CreateBootstrapPolicyFileOptions) Validate ¶
func (o CreateBootstrapPolicyFileOptions) Validate(args []string) error
type CreateClientCertOptions ¶
type CreateClientCertOptions struct {
SignerCertOptions *SignerCertOptions
CertFile string
KeyFile string
ExpireDays int
User string
Groups []string
Overwrite bool
Output io.Writer
}
func (CreateClientCertOptions) CreateClientCert ¶
func (o CreateClientCertOptions) CreateClientCert() (*crypto.TLSCertificateConfig, error)
func (CreateClientCertOptions) Validate ¶
func (o CreateClientCertOptions) Validate(args []string) error
type CreateClientOptions ¶
type CreateClientOptions struct {
SignerCertOptions *SignerCertOptions
ClientDir string
BaseName string
ExpireDays int
User string
Groups []string
APIServerCAFiles []string
APIServerURL string
PublicAPIServerURL string
genericclioptions.IOStreams
}
func NewCreateClientOptions ¶
func NewCreateClientOptions(streams genericclioptions.IOStreams) *CreateClientOptions
func (CreateClientOptions) CreateClientFolder ¶
func (o CreateClientOptions) CreateClientFolder() error
func (CreateClientOptions) Validate ¶
func (o CreateClientOptions) Validate(args []string) error
type CreateKeyPairOptions ¶
type CreateKeyPairOptions struct {
PublicKeyFile string
PrivateKeyFile string
Overwrite bool
genericclioptions.IOStreams
}
func NewCreateKeyPairOptions ¶
func NewCreateKeyPairOptions(streams genericclioptions.IOStreams) *CreateKeyPairOptions
func (CreateKeyPairOptions) CreateKeyPair ¶
func (o CreateKeyPairOptions) CreateKeyPair() error
func (CreateKeyPairOptions) Validate ¶
func (o CreateKeyPairOptions) Validate(args []string) error
type CreateKubeConfigOptions ¶
type CreateKubeConfigOptions struct {
APIServerURL string
PublicAPIServerURL string
APIServerCAFiles []string
CertFile string
KeyFile string
ContextNamespace string
KubeConfigFile string
genericclioptions.IOStreams
}
func NewCreateKubeConfigOptions ¶
func NewCreateKubeConfigOptions(streams genericclioptions.IOStreams) *CreateKubeConfigOptions
func (CreateKubeConfigOptions) CreateKubeConfig ¶
func (o CreateKubeConfigOptions) CreateKubeConfig() (*clientcmdapi.Config, error)
func (CreateKubeConfigOptions) Validate ¶
func (o CreateKubeConfigOptions) Validate(args []string) error
type CreateMasterCertsOptions ¶
type CreateMasterCertsOptions struct {
CertDir string
SignerName string
ExpireDays int
SignerExpireDays int
APIServerCAFiles []string
Hostnames []string
APIServerURL string
PublicAPIServerURL string
Overwrite bool
genericclioptions.IOStreams
}
func NewCreateMasterCertsOptions ¶
func NewCreateMasterCertsOptions(streams genericclioptions.IOStreams) *CreateMasterCertsOptions
func (CreateMasterCertsOptions) CreateMasterCerts ¶
func (o CreateMasterCertsOptions) CreateMasterCerts() error
func (CreateMasterCertsOptions) Validate ¶
func (o CreateMasterCertsOptions) Validate(args []string) error
type CreateServerCertOptions ¶
type CreateServerCertOptions struct {
SignerCertOptions *SignerCertOptions
CertFile string
KeyFile string
ExpireDays int
Hostnames []string
Overwrite bool
genericclioptions.IOStreams
}
func NewCreateServerCertOptions ¶
func NewCreateServerCertOptions(streams genericclioptions.IOStreams) *CreateServerCertOptions
func (CreateServerCertOptions) CreateServerCert ¶
func (o CreateServerCertOptions) CreateServerCert() (*crypto.TLSCertificateConfig, error)
func (CreateServerCertOptions) Validate ¶
func (o CreateServerCertOptions) Validate(args []string) error
type CreateSignerCertOptions ¶
type CreateSignerCertOptions struct {
CertFile string
KeyFile string
SerialFile string
ExpireDays int
Name string
Overwrite bool
genericclioptions.IOStreams
}
func NewCreateSignerCertOptions ¶
func NewCreateSignerCertOptions(streams genericclioptions.IOStreams) *CreateSignerCertOptions
func (CreateSignerCertOptions) CreateSignerCert ¶
func (o CreateSignerCertOptions) CreateSignerCert() (*crypto.CA, error)
func (CreateSignerCertOptions) Validate ¶
func (o CreateSignerCertOptions) Validate(args []string) error
type DecryptOptions ¶ added in v1.1.4
type DecryptOptions struct {
// EncryptedFile is a file containing an encrypted PEM block.
EncryptedFile string
// EncryptedData is a byte slice containing an encrypted PEM block.
EncryptedData []byte
// EncryptedReader is used to read an encrypted PEM block if no EncryptedFile or EncryptedData is provided. Cannot be a terminal reader.
EncryptedReader io.Reader
// DecryptedFile is a destination file to write decrypted data to.
DecryptedFile string
// DecryptedWriter is used to write decrypted data to if no DecryptedFile is provided
DecryptedWriter io.Writer
// KeyFile is a file containing a PEM block with the password to use to decrypt the data
KeyFile string
}
func NewDecryptOptions ¶
func NewDecryptOptions(streams genericclioptions.IOStreams) *DecryptOptions
func (*DecryptOptions) Decrypt ¶ added in v1.1.4
func (o *DecryptOptions) Decrypt() error
func (*DecryptOptions) Validate ¶ added in v1.1.4
func (o *DecryptOptions) Validate(args []string) error
type EncryptOptions ¶ added in v1.1.4
type EncryptOptions struct {
// CleartextFile contains cleartext data to encrypt.
CleartextFile string
// CleartextData is cleartext data to encrypt.
CleartextData []byte
// CleartextReader reads cleartext data to encrypt if CleartextReader and CleartextFile are unspecified.
CleartextReader io.Reader
// EncryptedFile has encrypted data written to it.
EncryptedFile string
// EncryptedWriter has encrypted data written to it if EncryptedFile is unspecified.
EncryptedWriter io.Writer
// KeyFile contains the password in PEM format (as previously written by GenKeyFile)
KeyFile string
// GenKeyFile indicates a key should be generated and written
GenKeyFile string
// PromptWriter is used to write status and prompt messages
PromptWriter io.Writer
}
func NewEncryptOptions ¶
func NewEncryptOptions(streams genericclioptions.IOStreams) *EncryptOptions
func (*EncryptOptions) Encrypt ¶ added in v1.1.4
func (o *EncryptOptions) Encrypt() error
func (*EncryptOptions) Validate ¶ added in v1.1.4
func (o *EncryptOptions) Validate(args []string) error
type SignerCertOptions ¶ added in v1.0.3
type SignerCertOptions struct {
CertFile string
KeyFile string
SerialFile string
// contains filtered or unexported fields
}
func NewDefaultSignerCertOptions ¶ added in v1.0.6
func NewDefaultSignerCertOptions() *SignerCertOptions
func (*SignerCertOptions) CA ¶ added in v1.0.3
func (o *SignerCertOptions) CA() (*crypto.CA, error)
func (*SignerCertOptions) Validate ¶ added in v1.0.3
func (o *SignerCertOptions) Validate() error
Source Files
¶
- create_bootstrappolicy_file.go
- create_client.go
- create_clientcert.go
- create_keypair.go
- create_kubeconfig.go
- create_mastercerts.go
- create_servercert.go
- create_signercert.go
- decrypt.go
- default_certs.go
- encrypt.go
- signer_cert_args.go
Click to show internal directories.
Click to hide internal directories.