reloader

Documentation

Index

• Constants
• type Controller
  • func NewController(logger *slog.Logger, kubeClient kubernetes.Interface, ...) *Controller
  • func (c *Controller) Run(ctx context.Context, reloaderPeriod time.Duration) error
• type ErrSecretNotFound
  • func (e ErrSecretNotFound) Error() string
• type VaultConfig

Constants

const (
	DeploymentKind  = "Deployment"
	DaemonSetKind   = "DaemonSet"
	StatefulSetKind = "StatefulSet"

	SecretReloadAnnotationName = "secrets-reloader.security.bank-vaults.io/reload-on-secret-change"
	ReloadCountAnnotationName  = "secrets-reloader.security.bank-vaults.io/secret-reload-count"
)

Types

type Controller

type Controller struct {
	// contains filtered or unexported fields
}

Controller is the controller implementation for Foo resources

func NewController

func NewController(
	logger *slog.Logger,
	kubeClient kubernetes.Interface,
	deploymentInformer appsinformers.DeploymentInformer,
	daemonSetInformer appsinformers.DaemonSetInformer,
	statefulSetInformer appsinformers.StatefulSetInformer,
) *Controller

NewController returns a new sample controller

func (*Controller) Run

func (c *Controller) Run(ctx context.Context, reloaderPeriod time.Duration) error

Run will set up the event handlers for types we are interested in, as well as syncing informer caches and starting reloader worker. It will block until stopCh is closed, at which point it will wait for the reloader to finish processing.

type ErrSecretNotFound

type ErrSecretNotFound struct {
	// contains filtered or unexported fields
}

func (ErrSecretNotFound) Error

func (e ErrSecretNotFound) Error() string

type VaultConfig

type VaultConfig struct {
	Addr                 string
	AuthMethod           string
	Role                 string
	Path                 string
	Namespace            string
	SkipVerify           bool
	TLSSecret            string
	TLSSecretNS          string
	ClientTimeout        time.Duration
	IgnoreMissingSecrets bool
}