Certificate | /cert-manager/cert-manager.io@v1/mod.ts | kubernetes_apis@v0.5.3

interface Certificate

import { type Certificate } from "https://deno.land/x/kubernetes_apis@v0.5.3/cert-manager/cert-manager.io@v1/mod.ts";

A Certificate resource should be created to ensure an up to date and signed X.509 certificate is stored in the Kubernetes Secret resource named in spec.secretName.

The stored certificate will be renewed before it expires (as configured by spec.renewBefore).

Properties

optional

apiVersion: "cert-manager.io/v1"

optional

kind: "Certificate"

optional

metadata: MetaV1.ObjectMeta | null

optional

spec: { additionalOutputFormats?: Array<{ type: "DER" | "CombinedPEM" | c.UnexpectedEnumValue; }> | null; commonName?: string | null; dnsNames?: Array<string> | null; duration?: string | null; emailAddresses?: Array<string> | null; encodeUsagesInRequest?: boolean | null; ipAddresses?: Array<string> | null; isCA?: boolean | null; issuerRef: { group?: string | null; kind?: string | null; name: string; }; keystores?: { jks?: { alias?: string | null; create: boolean; passwordSecretRef: SecretRef; } | null; pkcs12?: { create: boolean; passwordSecretRef: SecretRef; profile?:

| "LegacyRC2"

| "LegacyDES"

| "Modern2023"

| c.UnexpectedEnumValue

| null

; } | null; } | null; literalSubject?: string | null; nameConstraints?: { critical?: boolean | null; excluded?: { dnsDomains?: Array<string> | null; emailAddresses?: Array<string> | null; ipRanges?: Array<string> | null; uriDomains?: Array<string> | null; } | null; permitted?: { dnsDomains?: Array<string> | null; emailAddresses?: Array<string> | null; ipRanges?: Array<string> | null; uriDomains?: Array<string> | null; } | null; } | null; otherNames?: Array<{ oid?: string | null; utf8Value?: string | null; }> | null; privateKey?: { algorithm?:

| "RSA"

| "ECDSA"

| "Ed25519"

| c.UnexpectedEnumValue

| null

; encoding?:

| "PKCS1"

| "PKCS8"

| c.UnexpectedEnumValue

| null

; rotationPolicy?:

| "Never"

| "Always"

| c.UnexpectedEnumValue

| null

; size?: number | null; } | null; renewBefore?: string | null; revisionHistoryLimit?: number | null; secretName: string; secretTemplate?: { annotations?: Record<string, string> | null; labels?: Record<string, string> | null; } | null; subject?: { countries?: Array<string> | null; localities?: Array<string> | null; organizationalUnits?: Array<string> | null; organizations?: Array<string> | null; postalCodes?: Array<string> | null; provinces?: Array<string> | null; serialNumber?: string | null; streetAddresses?: Array<string> | null; } | null; uris?: Array<string> | null; usages?: Array<

| "signing"

| "digital signature"

| "content commitment"

| "key encipherment"

| "key agreement"

| "data encipherment"

| "cert sign"

| "crl sign"

| "encipher only"

| "decipher only"

| "any"

| "server auth"

| "client auth"

| "code signing"

| "email protection"

| "s/mime"

| "ipsec end system"

| "ipsec tunnel"

| "ipsec user"

| "timestamping"

| "ocsp signing"

| "microsoft sgc"

| "netscape sgc"

| c.UnexpectedEnumValue

> | null; } | null

optional

status: { conditions?: Array<{ lastTransitionTime?: c.Time | null; message?: string | null; observedGeneration?: number | null; reason?: string | null; status:

| "True"

| "False"

| "Unknown"

| c.UnexpectedEnumValue

; type: string; }> | null; failedIssuanceAttempts?: number | null; lastFailureTime?: c.Time | null; nextPrivateKeySecretName?: string | null; notAfter?: c.Time | null; notBefore?: c.Time | null; renewalTime?: c.Time | null; revision?: number | null; } | null