-
Notifications
You must be signed in to change notification settings - Fork 462
/
bundle.go
69 lines (57 loc) · 1.95 KB
/
bundle.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
// SPDX-FileCopyrightText: 2024 SAP SE or an SAP affiliate company and Gardener contributors
//
// SPDX-License-Identifier: Apache-2.0
package secrets
const (
// DataKeyCertificateBundle is the key in the data map for the certificate bundle.
DataKeyCertificateBundle = "bundle.crt"
// DataKeyPrivateKeyBundle is the key in the data map for the private key bundle.
DataKeyPrivateKeyBundle = "bundle.key"
)
// CertificateBundleSecretConfig is configuration for certificate bundles.
type CertificateBundleSecretConfig struct {
Name string
CertificatePEMs [][]byte
}
// GetName returns the name of the secret.
func (s *CertificateBundleSecretConfig) GetName() string {
return s.Name
}
// Generate implements ConfigInterface.
func (s *CertificateBundleSecretConfig) Generate() (DataInterface, error) {
return newBundle(s.Name, s.CertificatePEMs, DataKeyCertificateBundle)
}
// RSAPrivateKeyBundleSecretConfig is configuration for certificate bundles.
type RSAPrivateKeyBundleSecretConfig struct {
Name string
PrivateKeyPEMs [][]byte
}
// GetName returns the name of the secret.
func (s *RSAPrivateKeyBundleSecretConfig) GetName() string {
return s.Name
}
// Generate implements ConfigInterface.
func (s *RSAPrivateKeyBundleSecretConfig) Generate() (DataInterface, error) {
return newBundle(s.Name, s.PrivateKeyPEMs, DataKeyPrivateKeyBundle)
}
func newBundle(name string, entries [][]byte, dataKeyName string) (DataInterface, error) {
var bundle []byte
for _, entry := range entries {
bundle = append(bundle, entry...)
}
return &Bundle{
Name: name,
Bundle: bundle,
DataKeyName: dataKeyName,
}, nil
}
// Bundle contains the name and the generated certificate bundle.
type Bundle struct {
Name string
Bundle []byte
DataKeyName string
}
// SecretData computes the data map which can be used in a Kubernetes secret.
func (b *Bundle) SecretData() map[string][]byte {
return map[string][]byte{b.DataKeyName: b.Bundle}
}