ValidatePrivateKey validates given private key in PEM format.

EtcdCACN is a default CN for etcd CA certificate, as recommended by the https://kubernetes.io/docs/setup/best-practices/certificates/.

KubernetesCACN is a default CN for Kubernetes CA certificate, as recommended by https://kubernetes.io/docs/setup/best-practices/certificates/.

KubernetesFrontProxyCACN is a default CN for Kubernetes front proxy CA certificate, as recommended by https://kubernetes.io/docs/setup/best-practices/certificates/.

Organization is a default organization name in generated certificates.

RenewThreshold defines minimum remaining validity time for the certificate, before is will be renewed.

RootCACN is a default CN for root CA certificate.

RSABits is a default private key length.

RSAPrivateKeyPEMHeader is a PEM format header user while encoding RSA private keys.

RSAPublicKeyPEMHeader is a PEM format header user while encoding RSA public keys.

ValidityDuration is a default time the certificates are valid.

X509CertificatePEMHeader is a PEM format header used while encoding X.509 certificates.

Certificate defines configurable options for each certificate.

Etcd stores etcd PKI and their settings.

KubeAPIServer stores kube-apiserver certificates.

Kubernetes stores Kubernetes PKI and settings.

PKI contains configuration and all generated certificates and private keys required for running Kubernetes.