AsLegacySecrets transforms the given Certificates struct into a slice of Secrets that is compatible with certgen from sesame 1.4 and earlier.

AsSecrets transforms the given Certificates struct into a slice of Secrets in in compact Secret format, which is compatible with both cert-manager and Sesame.

WriteCertsPEM writes out all the certs in certdata to individual PEM files in outputDir.

WriteSecretsKube writes all the keypairs out to Kubernetes Secrets in the compact format which is compatible with Secrets generated by cert-manager.

WriteSecretsYAML writes all the keypairs out to Kubernetes Secrets in YAML form in outputDir.

CACertificateKey is the dictionary key for the CA certificate bundle.

EnvoyCertificateKey is the dictionary key for the Envoy certificate.

EnvoyPrivateKeyKey is the dictionary key for the Envoy private key.

NoOverwrite specifies outputs must not be overwritten.

Overwrite specifies outputs may be overwritten.

SesameCertificateKey is the dictionary key for the Sesame certificate.

SesamePrivateKeyKey is the dictionary key for the Sesame private key.

OverwritePolicy specifies whether an output should be overwritten.