From dcc3ad44b479c594386e80006d27cb8cfda08bb8 Mon Sep 17 00:00:00 2001 From: joshvanl Date: Wed, 16 Jun 2021 14:17:07 +0100 Subject: [PATCH] Adds CertificateSigningRequest venafi annotations to experimental API Signed-off-by: joshvanl --- pkg/apis/experimental/v1alpha1/types.go | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/pkg/apis/experimental/v1alpha1/types.go b/pkg/apis/experimental/v1alpha1/types.go index 59b8aff0e..bd2b0e47d 100644 --- a/pkg/apis/experimental/v1alpha1/types.go +++ b/pkg/apis/experimental/v1alpha1/types.go @@ -26,7 +26,10 @@ const ( // CertificateSigningRequestIsCAAnnotationKey is the annotation key used to // request whether the certificate should be marked as CA. CertificateSigningRequestIsCAAnnotationKey = "experimental.cert-manager.io/request-is-ca" +) +// SelfSigned Issuer specific Annotations +const ( // CertificateSigningRequestPrivateKeyAnnotationKey is the annotation key // used to reference a Secret resource containing the private key used to // sign the request. @@ -34,3 +37,18 @@ const ( // issuer type to self-sign certificates. CertificateSigningRequestPrivateKeyAnnotationKey = "experimental.cert-manager.io/private-key-secret-name" ) + +// Venafi Issuer specific Annotations +const ( + // CertificateSigningRequestVenafiCustomFieldsAnnotationKey is the annotation + // that passes on JSON encoded custom fields to the Venafi issuer. + // This will only work with Venafi TPP v19.3 and higher. + // The value is an array with objects containing the name and value keys for + // example: `[{"name": "custom-field", "value": "custom-value"}]` + CertificateSigningRequestVenafiCustomFieldsAnnotationKey = "venafi.experimental.cert-manager.io/custom-fields" + + // CertificateSigningRequestVenafiPickupIDAnnotationKey is the annotation key + // used to record the Venafi Pickup ID of a certificate signing request that + // has been submitted to the Venafi API for collection later. + CertificateSigningRequestVenafiPickupIDAnnotationKey = "venafi.experimental.cert-manager.io/pickup-id" +)