Class CertificateSigningRequestSpec

    • Constructor Detail

      • CertificateSigningRequestSpec

        public CertificateSigningRequestSpec()
        No args constructor for use in serialization
    • Method Detail

      • getExtra

        public Map<String,​List<String>> getExtra()
        Extra information about the requesting user. See user.Info interface for details.
      • setExtra

        public void setExtra​(Map<String,​List<String>> extra)
        Extra information about the requesting user. See user.Info interface for details.
      • getGroups

        public List<String> getGroups()
        Group information about the requesting user. See user.Info interface for details.
      • setGroups

        public void setGroups​(List<String> groups)
        Group information about the requesting user. See user.Info interface for details.
      • getRequest

        public String getRequest()
        Base64-encoded PKCS#10 CSR data
      • setRequest

        public void setRequest​(String request)
        Base64-encoded PKCS#10 CSR data
      • getSignerName

        public String getSignerName()
        Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:

        1. If it's a kubelet client certificate, it is assigned

        "kubernetes.io/kube-apiserver-client-kubelet".

        2. If it's a kubelet serving certificate, it is assigned

        "kubernetes.io/kubelet-serving".

        3. Otherwise, it is assigned "kubernetes.io/legacy-unknown".

        Distribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.

      • setSignerName

        public void setSignerName​(String signerName)
        Requested signer for the request. It is a qualified name in the form: `scope-hostname.io/name`. If empty, it will be defaulted:

        1. If it's a kubelet client certificate, it is assigned

        "kubernetes.io/kube-apiserver-client-kubelet".

        2. If it's a kubelet serving certificate, it is assigned

        "kubernetes.io/kubelet-serving".

        3. Otherwise, it is assigned "kubernetes.io/legacy-unknown".

        Distribution of trust for signers happens out of band. You can select on this field using `spec.signerName`.

      • getUid

        public String getUid()
        UID information about the requesting user. See user.Info interface for details.
      • setUid

        public void setUid​(String uid)
        UID information about the requesting user. See user.Info interface for details.
      • getUsages

        public List<String> getUsages()
        allowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3

        https://tools.ietf.org/html/rfc5280#section-4.2.1.12

        Valid values are:

        "signing",

        "digital signature",

        "content commitment",

        "key encipherment",

        "key agreement",

        "data encipherment",

        "cert sign",

        "crl sign",

        "encipher only",

        "decipher only",

        "any",

        "server auth",

        "client auth",

        "code signing",

        "email protection",

        "s/mime",

        "ipsec end system",

        "ipsec tunnel",

        "ipsec user",

        "timestamping",

        "ocsp signing",

        "microsoft sgc",

        "netscape sgc"

      • setUsages

        public void setUsages​(List<String> usages)
        allowedUsages specifies a set of usage contexts the key will be valid for. See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3

        https://tools.ietf.org/html/rfc5280#section-4.2.1.12

        Valid values are:

        "signing",

        "digital signature",

        "content commitment",

        "key encipherment",

        "key agreement",

        "data encipherment",

        "cert sign",

        "crl sign",

        "encipher only",

        "decipher only",

        "any",

        "server auth",

        "client auth",

        "code signing",

        "email protection",

        "s/mime",

        "ipsec end system",

        "ipsec tunnel",

        "ipsec user",

        "timestamping",

        "ocsp signing",

        "microsoft sgc",

        "netscape sgc"

      • getUsername

        public String getUsername()
        Information about the requesting user. See user.Info interface for details.
      • setUsername

        public void setUsername​(String username)
        Information about the requesting user. See user.Info interface for details.
      • getAdditionalProperties

        public Map<String,​Object> getAdditionalProperties()
      • setAdditionalProperty

        public void setAdditionalProperty​(String name,
                                          Object value)
      • setAdditionalProperties

        public void setAdditionalProperties​(Map<String,​Object> additionalProperties)