bundle

Documentation

Index

• Constants
• func AddBundleController(ctx context.Context, mgr manager.Manager, opts Options, ...) error
• type Options

Constants

const (
	// DefaultJKSPassword is the default password that Java uses; it's a Java convention to use this exact password.
	// Since we're not storing anything secret in the JKS files we generate, this password is not a meaningful security measure
	// but seems often to be expected by applications consuming JKS files
	DefaultJKSPassword = "changeit"
	// DefaultPKCS12Password is the empty string, that will create a password-less PKCS12 truststore.
	// Password-less PKCS is the new default Java truststore from Java 18.
	// By password-less, it means the certificates are not encrypted, and it contains no MacData for integrity check.
	DefaultPKCS12Password = ""
)

Functions

func AddBundleController

func AddBundleController(
	ctx context.Context,
	mgr manager.Manager,
	opts Options,
	targetCache cache.Cache,
) error

AddBundleController will register the Bundle controller with the controller-runtime Manager. The Bundle controller will reconcile Bundles on Bundle events, as well as when any related resource event in the Bundle source and target. The controller will only cache metadata for ConfigMaps and Secrets.

Types

type Options

type Options struct {
	// Log is the Bundle controller logger.
	Log logr.Logger

	// Namespace is the trust Namespace that source data can be referenced.
	Namespace string

	// DefaultPackageLocation is the location on the filesystem from which the 'default'
	// certificate package should be loaded. If set, a valid package must be successfully
	// loaded in order for the controller to start. If unset, referring to the default
	// certificate package in a `Bundle` resource will cause that Bundle to error.
	DefaultPackageLocation string

	// SecretTargetsEnabled controls if secret targets are enabled in the Bundle API.
	SecretTargetsEnabled bool

	// FilterExpiredCerts controls if expired certificates are filtered from the bundle.
	FilterExpiredCerts bool
}

Options hold options for the Bundle controller.