vault

Documentation

Overview

Package vault contains the reconciliation logic for the vault Custom Resource.

Index

• func EtcdClientTLSSecretName(vaultName string) string
• func EtcdNameForVault(name string) string
• func IsPodReady(p v1.Pod) bool
• func LabelsForVault(name string) map[string]string
• func NewVaultClient(hostname string, port string, tlsConfig *vaultapi.TLSConfig) (*vaultapi.Client, error)
• func PodDNSName(p v1.Pod) string
• func Reconcile(vr *api.VaultService) (err error)

Functions

func EtcdClientTLSSecretName

func EtcdClientTLSSecretName(vaultName string) string

etcdClientTLSSecretName returns the name of etcd client TLS secret for the given vault name

func EtcdNameForVault

func EtcdNameForVault(name string) string

EtcdNameForVault returns the etcd cluster's name for the given vault's name

func IsPodReady

func IsPodReady(p v1.Pod) bool

IsPodReady checks the status of the pod for the Ready condition

func LabelsForVault

func LabelsForVault(name string) map[string]string

LabelsForVault returns the labels for selecting the resources belonging to the given vault name.

func NewVaultClient

func NewVaultClient(hostname string, port string, tlsConfig *vaultapi.TLSConfig) (*vaultapi.Client, error)

func PodDNSName

func PodDNSName(p v1.Pod) string

PodDNSName constructs the dns name on which a pod can be addressed

func Reconcile

func Reconcile(vr *api.VaultService) (err error)

Reconcile reconciles the vault cluster's state to the spec specified by vr by preparing the TLS secrets, deploying the etcd and vault cluster, and finally updating the vault deployment if needed.