vault

Documentation

Index

• Constants
• type Vault
  • func NewVault(ctx *controllerpkg.Context) *Vault
  • func (v *Vault) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, ...) error

Constants

const (
	CSRControllerName = "certificatesigningrequests-issuer-vault"
)

Types

type Vault

type Vault struct {
	// contains filtered or unexported fields
}

Vault is a controller for signing Kubernetes CertificateSigningRequest using Vault Issuers.

func NewVault

func NewVault(ctx *controllerpkg.Context) *Vault

func (*Vault) Sign

func (v *Vault) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, issuerObj cmapi.GenericIssuer) error

Sign attempts to sign the given CertificateSigningRequest based on the provided Vault Issuer or ClusterIssuer. This function updates the CertificateSigningRequest resource if signing was successful. Returns an error which, if not nil, should trigger a retry.