externalsecret

Documentation

Index

• Variables
• func BuildManagedSecretClient(mgr ctrl.Manager) (client.Client, error)
• func GetExternalSecretCondition(status esv1beta1.ExternalSecretStatus, ...) *esv1beta1.ExternalSecretStatusCondition
• func NewExternalSecretCondition(condType esv1beta1.ExternalSecretConditionType, status v1.ConditionStatus, ...) *esv1beta1.ExternalSecretStatusCondition
• func SetExternalSecretCondition(es *esv1beta1.ExternalSecret, ...)
• type Reconciler
  • func (r *Reconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error)
  • func (r *Reconciler) SetupWithManager(mgr ctrl.Manager, opts controller.Options) error

Variables

var (
	ErrSecretImmutable     = fmt.Errorf("secret is immutable")
	ErrSecretIsOwned       = fmt.Errorf("secret is owned by another ExternalSecret")
	ErrSecretSetCtrlRef    = fmt.Errorf("could not set controller reference on secret")
	ErrSecretRemoveCtrlRef = fmt.Errorf("could not remove controller reference on secret")
)

these errors are explicitly defined so we can detect them with `errors.Is()`.

Functions

func BuildManagedSecretClient

func BuildManagedSecretClient(mgr ctrl.Manager) (client.Client, error)

func GetExternalSecretCondition

func GetExternalSecretCondition(status esv1beta1.ExternalSecretStatus, condType esv1beta1.ExternalSecretConditionType) *esv1beta1.ExternalSecretStatusCondition

GetExternalSecretCondition returns the condition with the provided type.

func NewExternalSecretCondition

func NewExternalSecretCondition(condType esv1beta1.ExternalSecretConditionType, status v1.ConditionStatus, reason, message string) *esv1beta1.ExternalSecretStatusCondition

NewExternalSecretCondition a set of default options for creating an External Secret Condition.

func SetExternalSecretCondition

func SetExternalSecretCondition(es *esv1beta1.ExternalSecret, condition esv1beta1.ExternalSecretStatusCondition)

SetExternalSecretCondition updates the external secret to include the provided condition.

Types

type Reconciler

type Reconciler struct {
	client.Client
	SecretClient              client.Client
	Log                       logr.Logger
	Scheme                    *runtime.Scheme
	RestConfig                *rest.Config
	ControllerClass           string
	RequeueInterval           time.Duration
	ClusterSecretStoreEnabled bool
	EnableFloodGate           bool
	// contains filtered or unexported fields
}

Reconciler reconciles a ExternalSecret object.

func (*Reconciler) Reconcile

func (r *Reconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error)

Reconcile implements the main reconciliation loop for watched objects (ExternalSecret, ClusterSecretStore and SecretStore), and updates/creates a Kubernetes secret based on them.

func (*Reconciler) SetupWithManager

func (r *Reconciler) SetupWithManager(mgr ctrl.Manager, opts controller.Options) error

SetupWithManager returns a new controller builder that will be started by the provided Manager.