secret

Documentation

Index

• Constants
• func AddInjectionAnnotation(t *meta.Tags, secretName string, containers []string) error
• func AddInjectionAnnotationMedusaContainers(t *meta.Tags, secretName string) error
• func AddInjectionAnnotationReaperContainers(t *meta.Tags, secretName string) error
• func DefaultSuperuserSecretName(clusterName string) string
• func HasReplicatedSecrets(ctx context.Context, c client.Client, kcKey client.ObjectKey, ...) bool
• func ReconcileReplicatedSecret(ctx context.Context, c client.Client, scheme *runtime.Scheme, ...) error
• func ReconcileSecret(ctx context.Context, c client.Client, secretName string, ...) error
• type SecretInjection

Constants

const (

	// OrphanResourceAnnotation when set to true prevents the deletion of secret from target clusters even if matching ReplicatedSecret is removed
	OrphanResourceAnnotation = "replicatedresource.k8ssandra.io/orphan"
)

const (
	SecretInjectionAnnotation = "k8ssandra.io/inject-secret"
)

e.g. k8ssandra.io/inject-secret: '[{ "name": "test-secret", "path": "/etc/test/test-secret", "containers": ["c1", "c2"]}]'

Functions

func AddInjectionAnnotation

func AddInjectionAnnotation(t *meta.Tags, secretName string, containers []string) error

func AddInjectionAnnotationMedusaContainers

func AddInjectionAnnotationMedusaContainers(t *meta.Tags, secretName string) error

func AddInjectionAnnotationReaperContainers

func AddInjectionAnnotationReaperContainers(t *meta.Tags, secretName string) error

func DefaultSuperuserSecretName

func DefaultSuperuserSecretName(clusterName string) string

DefaultSuperuserSecretName returns a default name for the superuser secret. It is of the general form <cluster_name>-superuser. Note that we expect clusterName to be a valid DNS subdomain name as defined in RFC 1123, otherwise the secret name won't be valid.

func HasReplicatedSecrets

func HasReplicatedSecrets(ctx context.Context, c client.Client, kcKey client.ObjectKey, targetContext string) bool

func ReconcileReplicatedSecret

func ReconcileReplicatedSecret(ctx context.Context, c client.Client, scheme *runtime.Scheme, kc *api.K8ssandraCluster, logger logr.Logger) error

ReconcileReplicatedSecret ensures that the correct replicatedSecret for all managed secrets is created

func ReconcileSecret

func ReconcileSecret(ctx context.Context, c client.Client, secretName string, kcKey client.ObjectKey) error

ReconcileSecret creates a new secret with proper "managed-by" annotations, or ensure the existing secret has such annotations.

Types

type SecretInjection

type SecretInjection struct {
	SecretName string   `json:"name"`
	Path       string   `json:"path"`
	Containers []string `json:"containers,omitempty"`
}