k8s

Documentation

Index

• func SubmitCSR(ctx context.Context, config *cfg.Config, restClient *RestClient, ...) error
• func WatchCSR(ctx context.Context, restClient *RestClient, cfg *cfg.Config, ...) error
• func WriteCertificateToFile(cfg *cfg.Config, cert []byte, x509CSR *tls.X509CSR) error
• type RestClient
  • func NewRestClient() (*RestClient, error)

Functions

func SubmitCSR

func SubmitCSR(ctx context.Context, config *cfg.Config, restClient *RestClient, x509CSR *tls.X509CSR) error

SubmitCSR Submits a CSR in order to obtain a signed certificate for this pod.

func WatchCSR

func WatchCSR(ctx context.Context, restClient *RestClient, cfg *cfg.Config, x509CSR *tls.X509CSR) error

WatchCSR Watches the CSR resource for updates and writes results to the certificate location (which should be mounted as an emptyDir)

func WriteCertificateToFile

func WriteCertificateToFile(cfg *cfg.Config, cert []byte, x509CSR *tls.X509CSR) error

WriteCertificateToFile writes TLS key, cert and cacert to the mount location specified in the config parameter.

Types

type RestClient

type RestClient struct {
	RestConfig            *rest.Config
	Clientset             kubernetes.Interface
	APIRegistrationClient v1beta1.ApiregistrationV1beta1Interface
}

func NewRestClient

func NewRestClient() (*RestClient, error)

GetRestClient returns a bundle of K8s REST client interfaces.