quarkssecret

Documentation

Index

• Constants
• func AddCertificateSigningRequest(ctx context.Context, config *config.Config, mgr manager.Manager) error
• func AddCopy(ctx context.Context, config *config.Config, mgr manager.Manager) error
• func AddQuarksSecret(ctx context.Context, config *config.Config, mgr manager.Manager) error
• func AddQuarksSecretSecretMeta(ctx context.Context, config *config.Config, mgr manager.Manager) error
• func AddSecretRotation(ctx context.Context, config *config.Config, mgr manager.Manager) error
• func GetSourceSecret(ctx context.Context, client client.Client, qsec *qsv1a1.QuarksSecret) (*corev1.Secret, error)
• func NewCertificateSigningRequestReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, ...) reconcile.Reconciler
• func NewCopyReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, ...) reconcile.Reconciler
• func NewQuarksSecretReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, ...) reconcile.Reconciler
• func NewQuarksSecretSecretMetaReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, ...) reconcile.Reconciler
• func NewSecretRotationReconciler(ctx context.Context, config *config.Config, mgr manager.Manager) reconcile.Reconciler
• type ReconcileCertificateSigningRequest
  • func (r *ReconcileCertificateSigningRequest) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)
• type ReconcileCopy
  • func (r *ReconcileCopy) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)
• type ReconcileQuarksSecret
  • func (r *ReconcileQuarksSecret) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)
• type ReconcileQuarksSecretSecretMeta
  • func (r *ReconcileQuarksSecretSecretMeta) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)
• type ReconcileSecretRotation
  • func (r *ReconcileSecretRotation) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)
• type TemplateEngine

Constants

const HelmTemplate = "helm"

HelmTemplate is the constant used to identify the helm based templating

Functions

func AddCertificateSigningRequest

func AddCertificateSigningRequest(ctx context.Context, config *config.Config, mgr manager.Manager) error

AddCertificateSigningRequest creates a new CertificateSigningRequest controller to watch for new and changed certificate signing request. Reconciliation will approve them and create a secret.

func AddCopy

func AddCopy(ctx context.Context, config *config.Config, mgr manager.Manager) error

AddCopy creates a new QuarksSecrets controller to watch for the user defined secrets.

func AddQuarksSecret

func AddQuarksSecret(ctx context.Context, config *config.Config, mgr manager.Manager) error

AddQuarksSecret creates a new QuarksSecrets controller to watch for the custom resource and reconcile it into k8s secrets.

func AddQuarksSecretSecretMeta

func AddQuarksSecretSecretMeta(ctx context.Context, config *config.Config, mgr manager.Manager) error

AddQuarksSecretSecretMeta creates a new QuarksSecrets controller to watch for the custom resource changes for `SecretLabels` and `SecretAnnotations`.

func AddSecretRotation

func AddSecretRotation(ctx context.Context, config *config.Config, mgr manager.Manager) error

AddSecretRotation resets all QuarksSecret to status' to generated=false

func GetSourceSecret

func GetSourceSecret(ctx context.Context, client client.Client, qsec *qsv1a1.QuarksSecret) (*corev1.Secret, error)

GetSourceSecret fetches the secret generated by QuarkSecret

func NewCertificateSigningRequestReconciler

func NewCertificateSigningRequestReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, certClient certv1client.CertificatesV1beta1Interface, srf setReferenceFunc) reconcile.Reconciler

NewCertificateSigningRequestReconciler returns a new Reconciler

func NewCopyReconciler

func NewCopyReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, generator credsgen.Generator, srf setReferenceFunc) reconcile.Reconciler

NewCopyReconciler returns a new ReconcileCopy

func NewQuarksSecretReconciler

func NewQuarksSecretReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, generator credsgen.Generator, srf setReferenceFunc) reconcile.Reconciler

NewQuarksSecretReconciler returns a new ReconcileQuarksSecret

func NewQuarksSecretSecretMetaReconciler

func NewQuarksSecretSecretMetaReconciler(ctx context.Context, config *config.Config, mgr manager.Manager, generator credsgen.Generator) reconcile.Reconciler

NewQuarksSecretSecretMetaReconciler returns a new ReconcileQuarksSecretSecretMeta

func NewSecretRotationReconciler

func NewSecretRotationReconciler(ctx context.Context, config *config.Config, mgr manager.Manager) reconcile.Reconciler

NewSecretRotationReconciler returns a new ReconcileQuarksSecret

Types

type ReconcileCertificateSigningRequest

type ReconcileCertificateSigningRequest struct {
	// contains filtered or unexported fields
}

ReconcileCertificateSigningRequest reconciles an CertificateSigningRequest object

func (*ReconcileCertificateSigningRequest) Reconcile

func (r *ReconcileCertificateSigningRequest) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile approves pending CSR and creates its certificate secret

type ReconcileCopy

type ReconcileCopy struct {
	// contains filtered or unexported fields
}

ReconcileCopy reconciles an QuarksSecret object

func (*ReconcileCopy) Reconcile

func (r *ReconcileCopy) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile reads sets the copied field in status spec to false and copies the secrets from source namespace to the target namespaces.

type ReconcileQuarksSecret

type ReconcileQuarksSecret struct {
	// contains filtered or unexported fields
}

ReconcileQuarksSecret reconciles an QuarksSecret object

func (*ReconcileQuarksSecret) Reconcile

func (r *ReconcileQuarksSecret) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile reads that state of the cluster for a QuarksSecret object and makes changes based on the state read and what is in the QuarksSecret.Spec Note: The Controller will requeue the Request to be processed again if the returned error is non-nil or Result.Requeue is true, otherwise upon completion it will remove the work from the queue.

type ReconcileQuarksSecretSecretMeta

type ReconcileQuarksSecretSecretMeta struct {
	// contains filtered or unexported fields
}

ReconcileQuarksSecretSecretMeta reconciles an QuarksSecret object

func (*ReconcileQuarksSecretSecretMeta) Reconcile

func (r *ReconcileQuarksSecretSecretMeta) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile applies the `SecretLabels` and `SecretAnnotations` from QuarksSecret to the generated Secret.

type ReconcileSecretRotation

type ReconcileSecretRotation struct {
	// contains filtered or unexported fields
}

ReconcileSecretRotation reconciles an QuarksSecret object

func (*ReconcileSecretRotation) Reconcile

func (r *ReconcileSecretRotation) Reconcile(_ context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile reads that state of the cluster and trigger secret rotation for all listed deployments.

type TemplateEngine

type TemplateEngine interface {
	// ExecuteMap renders the templates in templates with variables from values
	ExecuteMap(templates map[string]string, values map[string]interface{}) map[string]string
}

TemplateEngine renders TemplatedConfigs, which are stored in secret.data