certificatesigningcontroller

Documentation

Index

• func NewCertificateLoadingController(rotatedSigningCASecretNamespace, rotatedSigningCASecretName string, ...) (func(ctx context.Context) (*librarygocrypto.CA, error), factory.Controller)
• func NewCertificateSigningController(hostedControlPlane *hypershiftv1beta1.HostedControlPlane, ...) factory.Controller
• type CertificateLoadingController
  • func (c *CertificateLoadingController) CurrentCA(ctx context.Context) (*librarygocrypto.CA, error)
  • func (c *CertificateLoadingController) SetCA(certPEM, keyPEM []byte) (bool, error)
• type CertificateSigningController

Functions

func NewCertificateLoadingController

func NewCertificateLoadingController(
	rotatedSigningCASecretNamespace, rotatedSigningCASecretName string,
	kubeInformersForNamespaces v1helpers.KubeInformersForNamespaces,
	eventRecorder events.Recorder,
) (func(ctx context.Context) (*librarygocrypto.CA, error), factory.Controller)

func NewCertificateSigningController

func NewCertificateSigningController(
	hostedControlPlane *hypershiftv1beta1.HostedControlPlane,
	signer certificates.SignerClass,
	getCurrentCABundleContent func(context.Context) (*librarygocrypto.CA, error),
	kubeInformersForNamespaces v1helpers.KubeInformersForNamespaces,
	kubeClient kubernetes.Interface,
	eventRecorder events.Recorder,
	certTTL time.Duration,
) factory.Controller

Types

type CertificateLoadingController

type CertificateLoadingController struct {
	// contains filtered or unexported fields
}

func (*CertificateLoadingController) CurrentCA

func (c *CertificateLoadingController) CurrentCA(ctx context.Context) (*librarygocrypto.CA, error)

CurrentCA provides the current value of the CA. This is a blocking call as the value being loaded may not exist at the time it's being requested.

func (*CertificateLoadingController) SetCA

func (c *CertificateLoadingController) SetCA(certPEM, keyPEM []byte) (bool, error)

SetCA unconditionally stores the current cert/key content

type CertificateSigningController

type CertificateSigningController struct {
	// contains filtered or unexported fields
}