pulumi-kubernetes-kotlin/com.pulumi.kubernetes.certificates.v1.kotlin.inputs/CertificateSigningRequestArgs

CertificateSigningRequestArgs

data class CertificateSigningRequestArgs(val apiVersion: Output<String>? = null, val kind: Output<String>? = null, val metadata: Output<ObjectMetaArgs>? = null, val spec: Output<CertificateSigningRequestSpecArgs>, val status: Output<CertificateSigningRequestStatusArgs>? = null) : ConvertibleToJava<CertificateSigningRequestArgs>

CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued. Kubelets use this API to obtain:

  1. client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client-kubelet" signerName).

  2. serving certificates for TLS endpoints kube-apiserver can connect to securely (with the "kubernetes.io/kubelet-serving" signerName). This API can be used to request client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client" signerName), or to obtain certificates from custom non-Kubernetes signers.

Constructors

Link copied to clipboard
fun CertificateSigningRequestArgs(apiVersion: Output<String>? = null, kind: Output<String>? = null, metadata: Output<ObjectMetaArgs>? = null, spec: Output<CertificateSigningRequestSpecArgs>, status: Output<CertificateSigningRequestStatusArgs>? = null)

Functions

Link copied to clipboard
open override fun toJava(): CertificateSigningRequestArgs

Properties

Link copied to clipboard
val apiVersion: Output<String>? = null

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

Link copied to clipboard
val kind: Output<String>? = null

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

Link copied to clipboard
val metadata: Output<ObjectMetaArgs>? = null
Link copied to clipboard
val spec: Output<CertificateSigningRequestSpecArgs>

spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.

Link copied to clipboard
val status: Output<CertificateSigningRequestStatusArgs>? = null

status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure.