keypairs

Documentation

Index

• type CertTree
• type Provider
  • func Reconciler(kubeClient *kubeprovider.Client) *Provider
  • func (c *Provider) GetOrGenerateSecret(ctx context.Context, request *secrets.Request) (*v1.Secret, error)
  • func (c *Provider) GetSecretFromServer(ctx context.Context, nn types.NamespacedName) (*v1.Secret, error)
  • func (c *Provider) ReconcileCertsFor(ctx context.Context, controlPlane *v1alpha1.ControlPlane, ...) error

Types

type CertTree

type CertTree map[*secrets.Request][]*secrets.Request

CertTree contains root CA as the key and all the certificates signed by this root CA (leafs) are added as the value for this map

type Provider

type Provider struct {
	// contains filtered or unexported fields
}

func Reconciler

func Reconciler(kubeClient *kubeprovider.Client) *Provider

func (*Provider) GetOrGenerateSecret

func (c *Provider) GetOrGenerateSecret(ctx context.Context, request *secrets.Request) (*v1.Secret, error)

GetOrGenerateSecret will check with API server for this object. Calls GetSecretFromServer to get from API server and validate If the object is not found, it will create and return a new secret object.

func (*Provider) GetSecretFromServer

func (c *Provider) GetSecretFromServer(ctx context.Context, nn types.NamespacedName) (*v1.Secret, error)

GetSecretFromServer will get the secret from API server and validate

func (*Provider) ReconcileCertsFor

func (c *Provider) ReconcileCertsFor(ctx context.Context, controlPlane *v1alpha1.ControlPlane, certsTreeMap CertTree) error

ReconcileFor reconciles all certs/key requested as part of the certsTreeMap. All the cert/key pairs are stored as a secret object. It will first read the existing secret, if not found will create one.