Move APIs to be used by both controller and configurer (#8854)

pkg/apis/ingress/sslcert.go

@@ -0,0 +1,91 @@
+/*
+Copyright 2016 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package ingress
+
+import (
+	"crypto/x509"
+	"fmt"
+	"time"
+
+	"k8s.io/apimachinery/pkg/runtime/schema"
+)
+
+// SSLCert describes a SSL certificate to be used in a server
+type SSLCert struct {
+	Name      string `json:"name"`
+	Namespace string `json:"namespace"`
+
+	Certificate *x509.Certificate `json:"-"`
+
+	CACertificate []*x509.Certificate `json:"-"`
+
+	// CAFileName contains the path to the file with the root certificate
+	CAFileName string `json:"caFileName"`
+
+	// CASHA contains the sha1 of the ca file.
+	// This is used to detect changes in the secret that contains certificates
+	CASHA string `json:"caSha"`
+
+	// CRLFileName contains the path to the file with the Certificate Revocation List
+	CRLFileName string `json:"crlFileName"`
+	// CRLSHA contains the sha1 of the pem file.
+	CRLSHA string `json:"crlSha"`
+
+	// PemFileName contains the path to the file with the certificate and key concatenated
+	PemFileName string `json:"pemFileName"`
+
+	// PemSHA contains the sha1 of the pem file.
+	// This is used to detect changes in the secret that contains certificates
+	PemSHA string `json:"pemSha"`
+
+	// CN contains all the common names defined in the SSL certificate
+	CN []string `json:"cn"`
+
+	// ExpiresTime contains the expiration of this SSL certificate in timestamp format
+	ExpireTime time.Time `json:"expires"`
+
+	// Pem encoded certificate and key concatenated
+	PemCertKey string `json:"pemCertKey,omitempty"`
+
+	// UID unique identifier of the Kubernetes Secret
+	UID string `json:"uid"`
+}
+
+// GetObjectKind implements the ObjectKind interface as a noop
+func (s SSLCert) GetObjectKind() schema.ObjectKind {
+	return schema.EmptyObjectKind
+}
+
+// Identifier returns a the couple issuer / serial number if they both exist, an empty string otherwise
+func (s SSLCert) Identifier() string {
+	if s.Certificate != nil {
+		if s.Certificate.SerialNumber != nil {
+			return fmt.Sprintf("%s-%s", s.Certificate.Issuer.SerialNumber, s.Certificate.SerialNumber.String())
+		}
+	}
+	return ""
+}
+
+// HashInclude defines if a field should be used or not to calculate the hash
+func (s SSLCert) HashInclude(field string, v interface{}) (bool, error) {
+	switch field {
+	case "PemSHA", "CASHA", "ExpireTime":
+		return true, nil
+	default:
+		return false, nil
+	}
+}