import { type Certificate } from "https://deno.land/x/kubernetes_apis@v0.5.1/cert-manager/cert-manager.io@v1/structs.ts";
A Certificate resource should be created to ensure an up to date and signed x509 certificate is stored in the Kubernetes Secret resource named in spec.secretName
.
The stored certificate will be renewed before it expires (as configured by spec.renewBefore
).
Properties
spec: { additionalOutputFormats?: Array<{ type: "DER" | "CombinedPEM" | c.UnexpectedEnumValue; }> | null; commonName?: string | null; dnsNames?: Array<string> | null; duration?: string | null; emailAddresses?: Array<string> | null; encodeUsagesInRequest?: boolean | null; ipAddresses?: Array<string> | null; isCA?: boolean | null; issuerRef: { group?: string | null; kind?: string | null; name: string; }; keystores?: { jks?: { create: boolean; passwordSecretRef: SecretRef; } | null; pkcs12?: { create: boolean; passwordSecretRef: SecretRef; } | null; } | null; literalSubject?: string | null; privateKey?: { algorithm?: ; encoding?: ; rotationPolicy?: ; size?: number | null; } | null; renewBefore?: string | null; revisionHistoryLimit?: number | null; secretName: string; secretTemplate?: { annotations?: Record<string, string> | null; labels?: Record<string, string> | null; } | null; subject?: { countries?: Array<string> | null; localities?: Array<string> | null; organizationalUnits?: Array<string> | null; organizations?: Array<string> | null; postalCodes?: Array<string> | null; provinces?: Array<string> | null; serialNumber?: string | null; streetAddresses?: Array<string> | null; } | null; uris?: Array<string> | null; usages?: Array<> | null; }
| "RSA"
| "ECDSA"
| "Ed25519"
| c.UnexpectedEnumValue
| null
| "PKCS1"
| "PKCS8"
| c.UnexpectedEnumValue
| null
| "Never"
| "Always"
| c.UnexpectedEnumValue
| null
| "signing"
| "digital signature"
| "content commitment"
| "key encipherment"
| "key agreement"
| "data encipherment"
| "cert sign"
| "crl sign"
| "encipher only"
| "decipher only"
| "any"
| "server auth"
| "client auth"
| "code signing"
| "email protection"
| "s/mime"
| "ipsec end system"
| "ipsec tunnel"
| "ipsec user"
| "timestamping"
| "ocsp signing"
| "microsoft sgc"
| "netscape sgc"
| c.UnexpectedEnumValue
optional
status: { conditions?: Array<{ lastTransitionTime?: c.Time | null; message?: string | null; observedGeneration?: number | null; reason?: string | null; status: | "True"
| "False"
| "Unknown"
| c.UnexpectedEnumValue