rotation

Documentation

Index

• type AgeSorter
  • func (x AgeSorter) Len() int
  • func (x AgeSorter) Less(i, j int) bool
  • func (x AgeSorter) Swap(i, j int)
• type ETCDEncryptionKeyVerifier
  • func (v *ETCDEncryptionKeyVerifier) AfterCompleted(ctx context.Context)
  • func (v *ETCDEncryptionKeyVerifier) AfterPrepared(ctx context.Context)
  • func (v *ETCDEncryptionKeyVerifier) Before(ctx context.Context)
  • func (v *ETCDEncryptionKeyVerifier) ExpectCompletingStatus(g Gomega)
  • func (v *ETCDEncryptionKeyVerifier) ExpectPreparingStatus(g Gomega)
• type SecretConfigNamesToSecrets
  • func GroupByName(allSecrets []corev1.Secret) SecretConfigNamesToSecrets
• type SecretEncryptionVerifier
  • func (v *SecretEncryptionVerifier) AfterCompleted(ctx context.Context)
  • func (v *SecretEncryptionVerifier) AfterPrepared(ctx context.Context)
  • func (v *SecretEncryptionVerifier) Before(ctx context.Context)
  • func (v *SecretEncryptionVerifier) ExpectCompletingStatus(g Gomega)
  • func (v *SecretEncryptionVerifier) ExpectPreparingStatus(g Gomega)
• type ServiceAccountKeyVerifier
  • func (v *ServiceAccountKeyVerifier) AfterCompleted(ctx context.Context)
  • func (v *ServiceAccountKeyVerifier) AfterPrepared(ctx context.Context)
  • func (v *ServiceAccountKeyVerifier) Before(ctx context.Context)
  • func (v *ServiceAccountKeyVerifier) ExpectCompletingStatus(g Gomega)
  • func (v *ServiceAccountKeyVerifier) ExpectPreparingStatus(g Gomega)
• type Verifier
• type Verifiers
  • func (v Verifiers) AfterCompleted(ctx context.Context)
  • func (v Verifiers) AfterPrepared(ctx context.Context)
  • func (v Verifiers) Before(ctx context.Context)
  • func (v Verifiers) Cleanup(ctx context.Context)
  • func (v Verifiers) ExpectCompletingStatus(g Gomega)
  • func (v Verifiers) ExpectPreparingStatus(g Gomega)

Types

type AgeSorter

type AgeSorter []corev1.Secret

AgeSorter implements sort.Interface for a slice of secrets for sorting by age.

func (AgeSorter) Len

func (x AgeSorter) Len() int

func (AgeSorter) Less

func (x AgeSorter) Less(i, j int) bool

func (AgeSorter) Swap

func (x AgeSorter) Swap(i, j int)

type ETCDEncryptionKeyVerifier

type ETCDEncryptionKeyVerifier struct {
	RuntimeClient                client.Client
	Namespace                    string
	SecretsManagerLabelSelector  client.MatchingLabels
	GetETCDEncryptionKeyRotation func() *gardencorev1beta1.ETCDEncryptionKeyRotation
	// contains filtered or unexported fields
}

ETCDEncryptionKeyVerifier verifies the etcd encryption key rotation.

func (*ETCDEncryptionKeyVerifier) AfterCompleted

func (v *ETCDEncryptionKeyVerifier) AfterCompleted(ctx context.Context)

AfterCompleted is called when the Shoot is in Completed status.

func (*ETCDEncryptionKeyVerifier) AfterPrepared

func (v *ETCDEncryptionKeyVerifier) AfterPrepared(ctx context.Context)

AfterPrepared is called when the Shoot is in Prepared status.

func (*ETCDEncryptionKeyVerifier) Before

func (v *ETCDEncryptionKeyVerifier) Before(ctx context.Context)

Before is called before the rotation is started.

func (*ETCDEncryptionKeyVerifier) ExpectCompletingStatus

func (v *ETCDEncryptionKeyVerifier) ExpectCompletingStatus(g Gomega)

ExpectCompletingStatus is called while waiting for the Completing status.

func (*ETCDEncryptionKeyVerifier) ExpectPreparingStatus

func (v *ETCDEncryptionKeyVerifier) ExpectPreparingStatus(g Gomega)

ExpectPreparingStatus is called while waiting for the Preparing status.

type SecretConfigNamesToSecrets

type SecretConfigNamesToSecrets map[string][]corev1.Secret

SecretConfigNamesToSecrets is a map for secret config names to a list of corev1.Secret objects.

func GroupByName

func GroupByName(allSecrets []corev1.Secret) SecretConfigNamesToSecrets

GroupByName groups all secrets by name.

type SecretEncryptionVerifier

type SecretEncryptionVerifier struct {
	NewTargetClientFunc func() (kubernetes.Interface, error)
}

SecretEncryptionVerifier creates and reads secrets in the cluster to verify correct configuration of etcd encryption.

func (*SecretEncryptionVerifier) AfterCompleted

func (v *SecretEncryptionVerifier) AfterCompleted(ctx context.Context)

AfterCompleted is called when the Shoot is in Completed status.

func (*SecretEncryptionVerifier) AfterPrepared

func (v *SecretEncryptionVerifier) AfterPrepared(ctx context.Context)

AfterPrepared is called when the Shoot is in Prepared status.

func (*SecretEncryptionVerifier) Before

func (v *SecretEncryptionVerifier) Before(ctx context.Context)

Before is called before the rotation is started.

func (*SecretEncryptionVerifier) ExpectCompletingStatus

func (v *SecretEncryptionVerifier) ExpectCompletingStatus(g Gomega)

ExpectCompletingStatus is called while waiting for the Completing status.

func (*SecretEncryptionVerifier) ExpectPreparingStatus

func (v *SecretEncryptionVerifier) ExpectPreparingStatus(g Gomega)

ExpectPreparingStatus is called while waiting for the Preparing status.

type ServiceAccountKeyVerifier

type ServiceAccountKeyVerifier struct {
	RuntimeClient                client.Client
	Namespace                    string
	SecretsManagerLabelSelector  client.MatchingLabels
	GetServiceAccountKeyRotation func() *gardencorev1beta1.ServiceAccountKeyRotation
	// contains filtered or unexported fields
}

ServiceAccountKeyVerifier verifies the service account key rotation.

func (*ServiceAccountKeyVerifier) AfterCompleted

func (v *ServiceAccountKeyVerifier) AfterCompleted(ctx context.Context)

AfterCompleted is called when the Shoot is in Completed status.

func (*ServiceAccountKeyVerifier) AfterPrepared

func (v *ServiceAccountKeyVerifier) AfterPrepared(ctx context.Context)

AfterPrepared is called when the Shoot is in Prepared status.

func (*ServiceAccountKeyVerifier) Before

func (v *ServiceAccountKeyVerifier) Before(ctx context.Context)

Before is called before the rotation is started.

func (*ServiceAccountKeyVerifier) ExpectCompletingStatus

func (v *ServiceAccountKeyVerifier) ExpectCompletingStatus(g Gomega)

ExpectCompletingStatus is called while waiting for the Completing status.

func (*ServiceAccountKeyVerifier) ExpectPreparingStatus

func (v *ServiceAccountKeyVerifier) ExpectPreparingStatus(g Gomega)

ExpectPreparingStatus is called while waiting for the Preparing status.

type Verifier

type Verifier interface {
	// Before is called before the rotation is started.
	Before(ctx context.Context)
	// ExpectPreparingStatus is called while waiting for the Preparing status.
	ExpectPreparingStatus(g Gomega)
	// AfterPrepared is called when the Shoot is in Prepared status.
	AfterPrepared(ctx context.Context)
	// ExpectCompletingStatus is called while waiting for the Completing status.
	ExpectCompletingStatus(g Gomega)
	// AfterCompleted is called when the Shoot is in Completed status.
	AfterCompleted(ctx context.Context)
}

Verifier does some assertions in different phases of the credentials rotation test.

type Verifiers

type Verifiers []Verifier

Verifiers combines multiple Verifier instances and calls them sequentially

func (Verifiers) AfterCompleted

func (v Verifiers) AfterCompleted(ctx context.Context)

AfterCompleted is called when the Shoot is in Completed status.

func (Verifiers) AfterPrepared

func (v Verifiers) AfterPrepared(ctx context.Context)

AfterPrepared is called when the Shoot is in Prepared status.

func (Verifiers) Before

func (v Verifiers) Before(ctx context.Context)

Before is called before the rotation is started.

func (Verifiers) Cleanup

func (v Verifiers) Cleanup(ctx context.Context)

Cleanup is passed to ginkgo.DeferCleanup.

func (Verifiers) ExpectCompletingStatus

func (v Verifiers) ExpectCompletingStatus(g Gomega)

ExpectCompletingStatus is called while waiting for the Completing status.

func (Verifiers) ExpectPreparingStatus

func (v Verifiers) ExpectPreparingStatus(g Gomega)

ExpectPreparingStatus is called while waiting for the Preparing status.