Package util contains helpers for creating private keys and certs.

NewAPIServerCrtAndKey creates crt and key for apiserver using ca.

NewAPIServerKubeletClientCertAndKey creates certificate for the apiservers to connect to the kubelets securely, signed by the ca.

NewEtcdHealthcheckClientCertAndKey creates certificate for liveness probes to healthcheck etcd, signed by the given ca.

NewEtcdServerCertAndKey creates new crt-key pair using ca for etcd.

NewFrontProxyClientCertAndKey creates crt-key pair for proxy client using ca.

APIServerClient defines the client cert name for apiserver.

APIServerEtcdClient mirrors capi APIServerEtcdClient.

ControllerManagerKubeconfig defines the secret purpose for KCM Kubeconfigs.

EtcdClient defines the client cert name for etcd.

EtcdHealthClient defines the client cert name for etcd.

KubeletClient defines the client cert name for kubelet.

ProxyClient defines the client cert name for the front proxy.

KeyPair defines a cert/key pair that is used for the Kubernetes clients this was inspired by CAPI's KCP and how it manages CAs.

KeyPairs defines a set of keypairs to act on, this is useful in providing helpers to operate on many keypairs.