Obtaining a Cluster Certificate

Function

This API is used to obtain a certificate of a specified cluster.

Constraints

This API is applicable to clusters of v1.13 and later.

Calling Method

For details, see Calling APIs.

URI

POST /api/v3/projects/{project_id}/clusters/{cluster_id}/clustercert

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Details: Project ID. For details about how to obtain the value, see How to Obtain Parameters in the API URI. Constraints: None Options: Project IDs of the account Default value: N/A
cluster_id	Yes	String	Details: Cluster ID. For details about how to obtain the value, see How to Obtain Parameters in the API URI. Constraints: None Options: Cluster IDs Default value: N/A

Request Parameters

**Table 2** Request header parameters
Parameter	Mandatory	Type	Description
Content-Type	Yes	String	Details: The request body type or format Constraints: The GET method is not verified. Options: application/json application/json;charset=utf-8 application/x-pem-file multipart/form-data (used when the FormData parameter is present) Default value: N/A
X-Auth-Token	Yes	String	Details: Requests for calling an API can be authenticated using either a token or AK/SK. If token-based authentication is used, this parameter is mandatory and must be set to a user token. For details, see Obtaining a User Token. Constraints: None Options: N/A Default value: N/A

**Table 3** Request body parameters
Parameter	Mandatory	Type	Description
duration	Yes	Integer	Definition How long a cluster certificate is valid Constraints N/A Range -1 or 1 to 1827 NOTE: The minimum value is 1 day and the maximum value is 1827 days (5 years). For example, if there is one leap year within the five-year period, the maximum value is 1826 days. If the value is set -1, the maximum value (5 years) will be used. Default Value N/A

Response Parameters

Status code: 200

**Table 4** Response header parameters
Parameter	Type	Description
Port-ID	String	Definition Port ID of the cluster control plane node Constraints N/A Range N/A Default Value N/A

**Table 5** Response body parameters
Parameter	Type	Description
kind	String	Definition API type Constraints The value cannot be changed. Range N/A Default Value Config
apiVersion	String	Definition API version Constraints The value cannot be changed. Range N/A Default Value v1
preferences	Object	Definition This field is not in use. Constraints N/A Range N/A Default Value Empty
clusters	Array of Clusters objects	Definition Cluster list Constraints N/A
users	Array of Users objects	Definition Certificate information and client key information of a specified user Constraints N/A
contexts	Array of Contexts objects	Definition Context list Constraints N/A
current-context	String	Definition Current context Constraints N/A Range external: public network access internal: private network access Default Value If publicIp (a VM's EIP) is present, the value is external. If publicIp is not present, the value is internal.

**Table 6** Clusters
Parameter	Type	Description
name	String	Definition Cluster name Constraints N/A Range internalCluster: a cluster that can be accessed through a private network externalCluster: a cluster that can be accessed through the public network Default Value If publicIp (a VM's EIP) is not present, there is only one cluster in the cluster list, and the value of this parameter is internalCluster. If publicIp is present, there are more than one cluster in the cluster list, and the value of name of all extended clusters is externalCluster.
cluster	ClusterCert object	Definition Cluster information Constraints N/A

**Table 7** ClusterCert
Parameter	Type	Description
server	String	Definition Server address Constraints N/A Range N/A Default Value N/A
certificate-authority-data	String	Definition Certificate authorization data Constraints N/A Range N/A Default Value N/A
insecure-skip-tls-verify	Boolean	Definition Whether to skip server certificate verification Constraints N/A Range true false Default Value If the cluster type is externalCluster, the value is true.

**Table 8** Users
Parameter	Type	Description
name	String	Definition Name Constraints N/A Range N/A Default Value user
user	User object	Definition Certificate information and client key information of a specified user Constraints N/A

**Table 9** User
Parameter	Type	Description
client-certificate-data	String	Definition Client certificate Constraints N/A Range N/A Default Value N/A
client-key-data	String	Definition PEM encoding data from the TLS client key file Constraints N/A Range N/A Default Value N/A

**Table 10** Contexts
Parameter	Type	Description
name	String	Definition Context name Constraints N/A Range internal: private network access external: public network access Default Value If publicIp (a VM's EIP) is not present, there is only one cluster in the cluster list, and the value of this parameter is internal. If publicIp is present, there are more than one cluster in the cluster list, and the value of name of all extended contexts is external.
context	Context object	Definition Context Constraints N/A

**Table 11** Context
Parameter	Type	Description
cluster	String	Definition Cluster context Constraints N/A Range N/A Default Value N/A
user	String	Definition User context Constraints N/A Range N/A Default Value N/A

Example Requests

Applying for a cluster access certificate valid for 30 days

{
  "duration" : 30
}

Example Responses

Status code: 200

The certificate of the specified cluster is successfully obtained. For details about the certificate file format, see the Kubernetes v1.Config structure.

{
  "kind" : "Config",
  "apiVersion" : "v1",
  "preferences" : { },
  "clusters" : [ {
    "name" : "internalCluster",
    "cluster" : {
      "server" : "https://192.168.1.7:5443",
      "certificate-authority-data" : "Q2VydGlmaWNhdGU6******FTkQgQ0VSVElGSUNBVEUtLS0tLQo="
    }
  } ],
  "users" : [ {
    "name" : "user",
    "user" : {
      "client-certificate-data" : "LS0tLS1CRUdJTiBDR******QVRFLS0tLS0K",
      "client-key-data" : "LS0tLS1CRUdJTi******BLRVktLS0tLQo="
    }
  } ],
  "contexts" : [ {
    "name" : "internal",
    "context" : {
      "cluster" : "internalCluster",
      "user" : "user"
    }
  } ],
  "current-context" : "internal"
}

Status Codes

Status Code	Description
200	The certificate of the specified cluster is successfully obtained. For details about the certificate file format, see the Kubernetes v1.Config structure.