Class V1PodCertificateProjection
java.lang.Object
io.micronaut.kubernetes.client.openapi.model.V1PodCertificateProjection
@Generated("io.micronaut.openapi.generator.JavaMicronautClientCodegen")
public class V1PodCertificateProjection
extends Object
PodCertificateProjection provides a private key and X.509 certificate in the pod filesystem.
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptioncertificateChainPath(String certificateChainPath) Set certificateChainPath in a chainable fashion.credentialBundlePath(String credentialBundlePath) Set credentialBundlePath in a chainable fashion.booleanWrite the certificate chain at this path in the projected volume.Write the credential bundle at this path in the projected volume.Write the key at this path in the projected volume.The type of keypair Kubelet will generate for the pod.maxExpirationSeconds is the maximum lifetime permitted for the certificate.Kubelet's generated CSRs will be addressed to this signer.inthashCode()Set keyPath in a chainable fashion.Set keyType in a chainable fashion.maxExpirationSeconds(Integer maxExpirationSeconds) Set maxExpirationSeconds in a chainable fashion.voidsetCertificateChainPath(String certificateChainPath) Set the certificateChainPath property valuevoidsetCredentialBundlePath(String credentialBundlePath) Set the credentialBundlePath property valuevoidsetKeyPath(String keyPath) Set the keyPath property valuevoidsetKeyType(String keyType) Set the keyType property valuevoidsetMaxExpirationSeconds(Integer maxExpirationSeconds) Set the maxExpirationSeconds property valuevoidsetSignerName(String signerName) Set the signerName property valuesignerName(String signerName) Set signerName in a chainable fashion.toString()
-
Field Details
-
JSON_PROPERTY_KEY_TYPE
- See Also:
-
JSON_PROPERTY_SIGNER_NAME
- See Also:
-
JSON_PROPERTY_CERTIFICATE_CHAIN_PATH
- See Also:
-
JSON_PROPERTY_CREDENTIAL_BUNDLE_PATH
- See Also:
-
JSON_PROPERTY_KEY_PATH
- See Also:
-
JSON_PROPERTY_MAX_EXPIRATION_SECONDS
- See Also:
-
-
Constructor Details
-
V1PodCertificateProjection
-
-
Method Details
-
getKeyType
The type of keypair Kubelet will generate for the pod. Valid values are \"RSA3072\", \"RSA4096\", \"ECDSAP256\", \"ECDSAP384\", \"ECDSAP521\", and \"ED25519\".- Returns:
- the keyType property value
-
setKeyType
Set the keyType property value- Parameters:
keyType- property value to set
-
keyType
Set keyType in a chainable fashion.- Returns:
- The same instance of V1PodCertificateProjection for chaining.
-
getSignerName
Kubelet's generated CSRs will be addressed to this signer.- Returns:
- the signerName property value
-
setSignerName
Set the signerName property value- Parameters:
signerName- property value to set
-
signerName
Set signerName in a chainable fashion.- Returns:
- The same instance of V1PodCertificateProjection for chaining.
-
getCertificateChainPath
Write the certificate chain at this path in the projected volume. Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.- Returns:
- the certificateChainPath property value
-
setCertificateChainPath
Set the certificateChainPath property value- Parameters:
certificateChainPath- property value to set
-
certificateChainPath
Set certificateChainPath in a chainable fashion.- Returns:
- The same instance of V1PodCertificateProjection for chaining.
-
getCredentialBundlePath
Write the credential bundle at this path in the projected volume. The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key. The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates). Using credentialBundlePath lets your Pod's application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key.- Returns:
- the credentialBundlePath property value
-
setCredentialBundlePath
Set the credentialBundlePath property value- Parameters:
credentialBundlePath- property value to set
-
credentialBundlePath
Set credentialBundlePath in a chainable fashion.- Returns:
- The same instance of V1PodCertificateProjection for chaining.
-
getKeyPath
Write the key at this path in the projected volume. Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation.- Returns:
- the keyPath property value
-
setKeyPath
Set the keyPath property value- Parameters:
keyPath- property value to set
-
keyPath
Set keyPath in a chainable fashion.- Returns:
- The same instance of V1PodCertificateProjection for chaining.
-
getMaxExpirationSeconds
maxExpirationSeconds is the maximum lifetime permitted for the certificate. Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection. If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days). The signer implementation is then free to issue a certificate with any lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver. `kubernetes.io` signers will never issue certificates with a lifetime longer than 24 hours.- Returns:
- the maxExpirationSeconds property value
-
setMaxExpirationSeconds
Set the maxExpirationSeconds property value- Parameters:
maxExpirationSeconds- property value to set
-
maxExpirationSeconds
Set maxExpirationSeconds in a chainable fashion.- Returns:
- The same instance of V1PodCertificateProjection for chaining.
-
equals
-
hashCode
-
toString
-