tokeninvalidator

Documentation

Index

• Constants
• type Reconciler
  • func (r *Reconciler) AddToManager(ctx context.Context, mgr manager.Manager, targetCluster cluster.Cluster) error
  • func (r *Reconciler) MapServiceAccountToSecrets(_ context.Context, _ logr.Logger, _ client.Reader, obj client.Object) []reconcile.Request
  • func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)
  • func (r *Reconciler) SecretPredicate() predicate.Predicate
  • func (r *Reconciler) ServiceAccountPredicate() predicate.Predicate

Constants

const ControllerName = "token-invalidator"

ControllerName is the name of the controller.

Types

type Reconciler

type Reconciler struct {
	TargetClient client.Client
	TargetReader client.Reader
	Config       config.TokenInvalidatorControllerConfig

	// RateLimiter allows limiting exponential backoff for testing purposes
	RateLimiter ratelimiter.RateLimiter
}

Reconciler labels secrets whose tokens should be invalidated.

func (*Reconciler) AddToManager

func (r *Reconciler) AddToManager(ctx context.Context, mgr manager.Manager, targetCluster cluster.Cluster) error

AddToManager adds Reconciler to the given manager.

func (*Reconciler) MapServiceAccountToSecrets

func (r *Reconciler) MapServiceAccountToSecrets(_ context.Context, _ logr.Logger, _ client.Reader, obj client.Object) []reconcile.Request

MapServiceAccountToSecrets maps the ServiceAccount to all referenced secrets.

func (*Reconciler) Reconcile

func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile labels secrets whose tokens should be invalidated.

func (*Reconciler) SecretPredicate

func (r *Reconciler) SecretPredicate() predicate.Predicate

SecretPredicate returns the predicate for secrets.

func (*Reconciler) ServiceAccountPredicate

func (r *Reconciler) ServiceAccountPredicate() predicate.Predicate

ServiceAccountPredicate returns the predicate for service accounts.