controllers

Documentation

Index

• func RemoveAllFinalizers(ctx context.Context, c client.Client, log logr.Logger) error
• type LeaseTruncatedError
  • func (l *LeaseTruncatedError) Error() string
• type VaultAuthReconciler
  • func (r *VaultAuthReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *VaultAuthReconciler) SetupWithManager(mgr ctrl.Manager) error
• type VaultConnectionReconciler
  • func (r *VaultConnectionReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error)
  • func (r *VaultConnectionReconciler) SetupWithManager(mgr ctrl.Manager) error
• type VaultDynamicSecretReconciler
  • func (r *VaultDynamicSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *VaultDynamicSecretReconciler) SetupWithManager(mgr ctrl.Manager, opts controller.Options) error
• type VaultPKISecretReconciler
  • func (r *VaultPKISecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *VaultPKISecretReconciler) SetupWithManager(mgr ctrl.Manager) error
• type VaultStaticSecretReconciler
  • func (r *VaultStaticSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *VaultStaticSecretReconciler) SetupWithManager(mgr ctrl.Manager) error

Functions

func RemoveAllFinalizers

func RemoveAllFinalizers(ctx context.Context, c client.Client, log logr.Logger) error

RemoveAllFinalizers is responsible for removing all finalizers added by the controller to prevent finalizers from going stale when the controller is being deleted.

Types

type LeaseTruncatedError

type LeaseTruncatedError struct {
	Expected int
	Actual   int
}

LeaseTruncatedError indicates that the requested lease renewal duration is less than expected

func (*LeaseTruncatedError) Error

func (l *LeaseTruncatedError) Error() string

type VaultAuthReconciler

type VaultAuthReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	Recorder      record.EventRecorder
	ClientFactory vault.CachingClientFactory
}

VaultAuthReconciler reconciles a VaultAuth object

func (*VaultAuthReconciler) Reconcile

func (r *VaultAuthReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

Reconcile reconciles the secretsv1beta1.VaultAuth resource. Each reconciliation will validate the resource's configuration

Upon deletion of the resource, it will prune all referent Vault Client(s).

func (*VaultAuthReconciler) SetupWithManager

func (r *VaultAuthReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager sets up the controller with the Manager.

type VaultConnectionReconciler

type VaultConnectionReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	Recorder      record.EventRecorder
	ClientFactory vault.CachingClientFactory
}

VaultConnectionReconciler reconciles a VaultConnection object

func (*VaultConnectionReconciler) Reconcile

func (r *VaultConnectionReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error)

Reconcile reconciles the secretsv1beta1.VaultConnection resource. Upon a reconciliation it will verify that the configured Vault connection is valid.

Upon deletion of the resource, it will prune all referent Vault Client(s).

func (*VaultConnectionReconciler) SetupWithManager

func (r *VaultConnectionReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager sets up the controller with the Manager.

type VaultDynamicSecretReconciler

type VaultDynamicSecretReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	Recorder      record.EventRecorder
	ClientFactory vault.ClientFactory
	HMACValidator vault.HMACValidator
	// contains filtered or unexported fields
}

VaultDynamicSecretReconciler reconciles a VaultDynamicSecret object

func (*VaultDynamicSecretReconciler) Reconcile

func (r *VaultDynamicSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

Reconcile ensures that the VaultDynamicSecret Custom Resource is synced from Vault to its configured Kubernetes secret. The resource will periodically be reconciled to renew the dynamic secrets lease in Vault. If the renewal fails for any reason then the secret will be re-synced from Vault aka. rotated. If a secret rotation occurs and the resource has RolloutRestartTargets configured, then a request to "rollout restart" the configured Deployment, StatefulSet, ReplicaSet will be made to Kubernetes.

func (*VaultDynamicSecretReconciler) SetupWithManager

func (r *VaultDynamicSecretReconciler) SetupWithManager(mgr ctrl.Manager, opts controller.Options) error

SetupWithManager sets up the controller with the Manager.

type VaultPKISecretReconciler

type VaultPKISecretReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	ClientFactory vault.ClientFactory
	Recorder      record.EventRecorder
}

VaultPKISecretReconciler reconciles a VaultPKISecret object

func (*VaultPKISecretReconciler) Reconcile

func (r *VaultPKISecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

Reconcile is part of the main kubernetes reconciliation loop which aims to move the current state of the cluster closer to the desired state. It compares the state specified by the VaultPKISecret object against the actual cluster state, and then performs operations to make the cluster state reflect the state specified by the user.

func (*VaultPKISecretReconciler) SetupWithManager

func (r *VaultPKISecretReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager sets up the controller with the Manager.

type VaultStaticSecretReconciler

type VaultStaticSecretReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	Recorder      record.EventRecorder
	ClientFactory vault.ClientFactory
	HMACValidator vault.HMACValidator
}

VaultStaticSecretReconciler reconciles a VaultStaticSecret object

func (*VaultStaticSecretReconciler) Reconcile

func (r *VaultStaticSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

func (*VaultStaticSecretReconciler) SetupWithManager

func (r *VaultStaticSecretReconciler) SetupWithManager(mgr ctrl.Manager) error