selfsigned

Documentation

Index

• Constants
• type SelfSigned
  • func NewSelfSigned(ctx *controllerpkg.Context) *SelfSigned
  • func (s *SelfSigned) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, ...) error

Constants

const (
	CSRControllerName = "certificatesigningrequests-issuer-selfsigned"
)

Types

type SelfSigned

type SelfSigned struct {
	// contains filtered or unexported fields
}

SelfSigned is a controller for signing Kubernetes CertificateSigningRequest using SelfSigning Issuers.

func NewSelfSigned

func NewSelfSigned(ctx *controllerpkg.Context) *SelfSigned

func (*SelfSigned) Sign

func (s *SelfSigned) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, issuerObj cmapi.GenericIssuer) error

Sign attempts to sign the given CertificateSigningRequest based on the provided SelfSigned Issuer or ClusterIssuer. This function will update the resource if signing was successful. Returns an error which, if not nil, should trigger a retry. CertificateSigningRequests must have the "experimental.cert-manager.io/private-key-secret-name" annotation present to be signed. This annotation must reference a valid Secret containing a private key for signing.