Documentation
¶
Index ¶
- Constants
- Variables
- func GenerateRootCA(trustDomain string) (*core_ca.KeyPair, error)
- func InitProvider()
- func NewBundledIdentityProvider(roSecretManager manager.ReadOnlyResourceManager, ...) (providers.IdentityProvider, error)
- func PrivateKeyName(resourceName string) string
- func RootCAName(resourceName string) string
Constants ¶
View Source
const (
DefaultAllowedClockSkew = 10 * time.Second
)
Variables ¶
View Source
var DefaultWorkloadCertValidityPeriod = k8s.Duration{Duration: 24 * time.Hour}
Functions ¶
func GenerateRootCA ¶
We are using RSA since Envoy not fully works with ED25519 or ecliptic P-384
func InitProvider ¶
func InitProvider()
func NewBundledIdentityProvider ¶
func NewBundledIdentityProvider(roSecretManager manager.ReadOnlyResourceManager, secretManager manager.ResourceManager, metrics metrics.Metrics, zone string, environment config_core.EnvironmentType) (providers.IdentityProvider, error)
func PrivateKeyName ¶
func RootCAName ¶
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.