kubernetes/pkg/apis/certificates/helpers.go

// ParseCSR extracts the CSR from the bytes and decodes it.
func ParseCSR(pemBytes []byte) (*x509.CertificateRequest, error) { … }

var organizationNotSystemNodesErr …

var commonNameNotSystemNode …

var dnsOrIPSANRequiredErr …

var dnsSANNotAllowedErr …

var emailSANNotAllowedErr …

var ipSANNotAllowedErr …

var uriSANNotAllowedErr …

var kubeletServingRequiredUsages …

var kubeletServingRequiredUsagesNoRSA …

func IsKubeletServingCSR(req *x509.CertificateRequest, usages sets.String) bool { … }

func ValidateKubeletServingCSR(req *x509.CertificateRequest, usages sets.String) error { … }

var kubeletClientRequiredUsagesNoRSA …

var kubeletClientRequiredUsages …

func IsKubeletClientCSR(req *x509.CertificateRequest, usages sets.String) bool { … }

func ValidateKubeletClientCSR(req *x509.CertificateRequest, usages sets.String) error { … }