venafi

Documentation

Index

• Constants
• func NewVenafi(ctx *controllerpkg.Context) certificatesigningrequests.Signer
• type Venafi
  • func (v *Venafi) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, ...) error

Constants

const (
	CSRControllerName = "certificatesigningrequests-issuer-venafi"
)

Functions

func NewVenafi

func NewVenafi(ctx *controllerpkg.Context) certificatesigningrequests.Signer

Types

type Venafi

type Venafi struct {
	// contains filtered or unexported fields
}

Venafi is a Kubernetes CertificateSigningRequest controller, responsible for signing CertificateSigningRequests that reference a cert-manager Venafi Issuer or ClusterIssuer

func (*Venafi) Sign

func (v *Venafi) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, issuerObj cmapi.GenericIssuer) error

Sign attempts to sign the given CertificateSigningRequest based on the provided Venafi Issuer or ClusterIssuer. This function will update the resource if signing was successful. Returns an error which, if not nil, should trigger a retry. Since this signer takes some time to sign the request, this controller will set a "pick ID" annotation value that is used to fetch the latest state of the request in subsequent re-syncs. The re-syncs are triggered by using the workqueue's back-off mechanism.