certificates

Documentation

Overview

Package certificates contains logic for watching and synchronizing CertificateSigningRequests.

Index

• func IsCertificateRequestApproved(csr *certificates.CertificateSigningRequest) bool
• func IsCertificateRequestDenied(csr *certificates.CertificateSigningRequest) bool
• type CertificateController
  • func NewCertificateController(kubeClient clientset.Interface, syncPeriod time.Duration, ...) (*CertificateController, error)
  • func (cc *CertificateController) Run(workers int, stopCh <-chan struct{})

Functions

func IsCertificateRequestApproved

func IsCertificateRequestApproved(csr *certificates.CertificateSigningRequest) bool

IsCertificateRequestApproved returns true if a certificate request has the "Approved" condition and no "Denied" conditions; false otherwise.

func IsCertificateRequestDenied

func IsCertificateRequestDenied(csr *certificates.CertificateSigningRequest) bool

IsCertificateRequestDenied returns true if a certificate request has the "Denied" conditions; false otherwise.

Types

type CertificateController

type CertificateController struct {
	// contains filtered or unexported fields
}

func NewCertificateController

func NewCertificateController(kubeClient clientset.Interface, syncPeriod time.Duration, caCertFile, caKeyFile string, approveAllKubeletCSRsForGroup string) (*CertificateController, error)

func (*CertificateController) Run

func (cc *CertificateController) Run(workers int, stopCh <-chan struct{})

Run the main goroutine responsible for watching and syncing jobs.