Namespace Neon.Kube.Resources.CertManager
Classes
AcmeChallengeSolver
The Kubernetes spec for a cert-manager ClusterIssuer.
AcmeChallengeSolverDns01
Used to configure a DNS01 challenge provider to be used when solving DNS01 challenges. Only one DNS provider may be configured per solver.
AcmeExternalAccountBinding
Describes CertManager External Account Binding options.
AcmeIssuer
The Kubernetes spec for a cert-manager ClusterIssuer.
AcmeIssuerDns01ProviderRoute53
Defines the Route 53 configuration for AWS.
AcmeIssuerDns01ProviderWebhook
Defines the Route 53 configuration for AWS.
AcmeSecretKeySelector
Describes CertManager Secret Key Selector.
CertificateDnsNameSelector
The kubernetes spec for a cert-manager ClusterIssuer.
ChallengePayload
Describes a request/response for presenting or cleaning up an ACME challenge resource
ChallengeRequest
ChallengeResponse
ClusterIssuer
A ClusterIssuer represents a certificate issuing authority which can be referenced as part of issuerRef fields. It is similar to an Issuer, however it is cluster-scoped and therefore can be referenced by resources that exist in any namespace, not just the same namespace as the referent.
IssuerRef
A reference to the issuer for this certificate.
If the kind
field is not set, or set to Issuer
, an Issuer resource with the given name in the
same namespace as the Certificate will be used.If the kind
field is set to ClusterIssuer
,
a ClusterIssuer with the provided name will be used.The name
field in this stanza is required at
all times.
JKS
Configures options for storing a JKS keystore in the spec.secretName
Secret resource.
Keystores
Configures additional keystore output formats stored in the secretName
Secret resource.
PKCS12
Configures options for storing a PKCS12 keystore in the spec.secretName
Secret resource.
PasswordSecretRef
Configures additional keystore output formats stored in the secretName
Secret resource.
PrivateKey
Options to control private keys used for the Certificate.
Subject
Full X509 name specification (https://golang.org/pkg/crypto/x509/pkix/#Name).
V1Certificate
A Certificate resource should be created to ensure an up to date and signed x509 certificate is stored in the Kubernetes
Secret resource named in spec.secretName
. \n The stored certificate will be renewed before it expires
(as configured by spec.renewBefore
)."
V1CertificateRequest
A CertificateRequest is used to request a signed certificate from one of the configured issuers.
All fields within the CertificateRequest's spec
are immutable after creation. A CertificateRequest
will either succeed or fail, as denoted by its status.state
field. A CertificateRequest is a
one-shot resource, meaning it represents a single point in time request for a certificate and cannot
be re-used.
V1CertificateSpec
The kubernetes spec for a cert-manager certificate.
V1CertificateStatus
Status of the Certificate. This is set and managed automatically.
V1IssuerSpec
The kubernetes spec for a cert-manager Issuer.
Enums
ChallengeAction
ACME challenge action.
KeyAlgorithm
The private key algorithm of the corresponding private key for this certificate. If provided,
allowed values are either RSA
or ECDSA
If algorithm
is specified and size
is not provided,
key size of 256 will be used for ECDSA
key algorithm and key size of 2048 will be used for
RSA
key algorithm.
KeyEncoding
The private key cryptography standards (PKCS) for this certificate's private key to be encoded in.
RotationPolicy
RotationPolicy controls how private keys should be regenerated when a re-issuance is being processed.
X509Usages
X509Usages controls how private keys should be regenerated when a re-issuance is being processed.