signer

Documentation

Index

• func Add(mgr manager.Manager, status *statusmanager.StatusManager, _ cnoclient.Client) error
• type ReconcileCSR
  • func (r *ReconcileCSR) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

Functions

func Add

func Add(mgr manager.Manager, status *statusmanager.StatusManager, _ cnoclient.Client) error

Add controller and start it when the Manager is started.

Types

type ReconcileCSR

type ReconcileCSR struct {
	// contains filtered or unexported fields
}

ReconcileCSR reconciles a cluster CertificateSigningRequest object. This will watch for changes to CertificateSigningRequest resources with SignerName == signerName. It will automatically approve these requests for signing. This assumes that the cluster has been configured in a way that no bad actors can make certificate signing requests. In future, we may decide to implement a scheme that would use a one-time token to validate a request.

All requests will be signed using a CA, that is currently generated by the OperatorPKI, and the signed certificate will be returned in the status.

This allows clients to get a signed certificate while maintaining private key confidentiality.

func (*ReconcileCSR) Reconcile

func (r *ReconcileCSR) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile CSR