auth

Documentation

Index

• Constants
• type Certs
  • func NewCertsWatcher(client kubernetes.Client, pki enforcer.PublicKeyAdder, ...) *Certs
  • func (c *Certs) AddCertToNodeAnnotation(client kubernetes.Client, cert []byte)
  • func (c *Certs) StartWatchingCerts()
  • func (c *Certs) StopWatchingCerts()
  • func (c *Certs) SyncNodeCerts(client kubernetes.Client) error
• type PKI
  • func LoadPKI(dir string) (*PKI, error)

Constants

const CaCertPEMFile = "ca.crt"

CaCertPEMFile is the name of the CaCertPEMFile in the SecretDirectory directory.

const CertPEMFile = "cert.pem"

CertPEMFile is the name of the CertPEsMFile in the SecretDirectory directory.

const KeyPEMFile = "key.pem"

KeyPEMFile is the name of the KeyPEMFile in the SecretDirectory directory.

Types

type Certs

type Certs struct {
	// contains filtered or unexported fields
}

Certs is used to monitor the Certificate used all over the Kubernetes Cluster.

func NewCertsWatcher

func NewCertsWatcher(client kubernetes.Client, pki enforcer.PublicKeyAdder, nodeAnnotationKey string) *Certs

NewCertsWatcher creates a new Certs object and start watching for changes and updates on all the nodes on the Kube Cluster.

func (*Certs) AddCertToNodeAnnotation

func (c *Certs) AddCertToNodeAnnotation(client kubernetes.Client, cert []byte)

AddCertToNodeAnnotation registers the Cert of this node as an annotation on the KubeAPI.

func (*Certs) StartWatchingCerts

func (c *Certs) StartWatchingCerts()

StartWatchingCerts processes all the events for certs.

func (*Certs) StopWatchingCerts

func (c *Certs) StopWatchingCerts()

StopWatchingCerts stops watching for new certs and stops all the routines.

func (*Certs) SyncNodeCerts

func (c *Certs) SyncNodeCerts(client kubernetes.Client) error

SyncNodeCerts syncs all the nodes on the Kube Cluster and register the certs written as annotations.

type PKI

type PKI struct {
	KeyPEM    []byte
	CertPEM   []byte
	CaCertPEM []byte
}

A PKI is used to

func LoadPKI

func LoadPKI(dir string) (*PKI, error)

LoadPKI Create a new PKISecret from Kube Secret.