secret

Documentation

Index

• type GetObjectTTLFunc
  • func GetObjectTTLFromNodeFunc(getNode func() (*v1.Node, error)) GetObjectTTLFunc
• type Manager
  • func NewCachingSecretManager(kubeClient clientset.Interface, getTTL GetObjectTTLFunc) Manager
  • func NewFakeManager() Manager
  • func NewSimpleSecretManager(kubeClient clientset.Interface) Manager

Types

type GetObjectTTLFunc

type GetObjectTTLFunc func() (time.Duration, bool)

func GetObjectTTLFromNodeFunc

func GetObjectTTLFromNodeFunc(getNode func() (*v1.Node, error)) GetObjectTTLFunc

type Manager

type Manager interface {
	// Get secret by secret namespace and name.
	GetSecret(namespace, name string) (*v1.Secret, error)

	// RegisterPod registers all secrets from a given pod.
	RegisterPod(pod *v1.Pod)

	// UnregisterPod unregisters secrets from a given pod that are not
	// used by any other registered pod.
	UnregisterPod(pod *v1.Pod)
}

func NewCachingSecretManager

func NewCachingSecretManager(kubeClient clientset.Interface, getTTL GetObjectTTLFunc) Manager

NewCachingSecretManager creates a manager that keeps a cache of all secrets necessary for registered pods. It implements the following logic:

• whenever a pod is created or updated, the cached versions of all its secrets are invalidated
• every GetSecret() call tries to fetch the value from local cache; if it is not there, invalidated or too old, we fetch it from apiserver and refresh the value in cache; otherwise it is just fetched from cache

func NewFakeManager

func NewFakeManager() Manager

func NewSimpleSecretManager

func NewSimpleSecretManager(kubeClient clientset.Interface) Manager