Versions in this module Expand all Collapse all v0 v0.1.1 Apr 11, 2023 v0.1.0 Mar 27, 2023 Changes in this version + var BucketPoolRecognizer = generic.NewCertificateSigningRequestRecognizer(IsBucketPoolClientCert, authv1.ResourceAttributes{ ... }, ...) + var BucketPoolRequiredUsages = sets.New[certificatesv1.KeyUsage](certificatesv1.UsageDigitalSignature, certificatesv1.UsageKeyEncipherment, ...) + var Recognizers []generic.CertificateSigningRequestRecognizer + var VolumePoolRecognizer = generic.NewCertificateSigningRequestRecognizer(IsVolumePoolClientCert, authv1.ResourceAttributes{ ... }, ...) + var VolumePoolRequiredUsages = sets.New[certificatesv1.KeyUsage](certificatesv1.UsageDigitalSignature, certificatesv1.UsageKeyEncipherment, ...) + func IsBucketPoolClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool + func IsVolumePoolClientCert(csr *certificatesv1.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool + func ValidateBucketPoolClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error + func ValidateVolumePoolClientCSR(req *x509.CertificateRequest, usages sets.Set[certificatesv1.KeyUsage]) error