webhooks

Documentation

Index

• func CreateCertificates(dnsNames []string, certsDirectory string, certFileName string, ...) ([]byte, error)
• func GetWebhookServiceDNSNames(ctx context.Context, clientSet *kubernetes.Clientset) ([]string, error)
• func UpdateWebhookConfiguration(ctx context.Context, clientSet *kubernetes.Clientset, caPemCert []byte) error

Functions

func CreateCertificates

func CreateCertificates(dnsNames []string, certsDirectory string, certFileName string, certKeyFileName string) ([]byte, error)

CreateCertificates creates the self-signed CA and server certs for the Admission Webhook server. The expiration time for the certificates is 2 years for the really unusual cases when manager is not restarted in 2 years. Returns CA certificate to further patch Mutating and Validating configs.

func GetWebhookServiceDNSNames

func GetWebhookServiceDNSNames(ctx context.Context, clientSet *kubernetes.Clientset) ([]string, error)

GetWebhookServiceDNSNames locates the manager's webhook service with the predefined labels and returns the list of DNS names for this service to use during the certificates creation.

func UpdateWebhookConfiguration

func UpdateWebhookConfiguration(ctx context.Context, clientSet *kubernetes.Clientset, caPemCert []byte) error

UpdateWebhookConfiguration patches the Kusk Gateway Mutating and Validating Admission configurations with the certificate authority certificate.