usersshkeysagent

Documentation

Overview

Package usersshkeysagent contains the usersshkeysagent controller, which is deployed as a DaemonSet on all usercluster nodes and responsible for synchronizing the `$HOME/.ssh/authorized_keys` file for all users we know about (root, core, ubuntu, centos) and that exist with the content of a secret.

This secret in turn is synchronized based on a secret in the seed namespace via a controller running in the usercluster controller manager and that seed namespace secret is synchronized based on the usersshkeys custom resources in the master cluster via a controller running in the master controller manager.

Index

• func Add(mgr manager.Manager, log *zap.SugaredLogger, authorizedKeysPaths []string) error
• func NewCacheFunc() cache.NewCacheFunc
• type Reconciler
  • func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

Functions

func Add

func Add(
	mgr manager.Manager,
	log *zap.SugaredLogger,
	authorizedKeysPaths []string) error

func NewCacheFunc

func NewCacheFunc() cache.NewCacheFunc

NewCacheFunc returns a user-ssh-keys-agent specific cache.NewCacheFunc that limits the cache to the Secret object that is needed by the controller. This is done so we can limit the RBAC assignment for this controller to the bare minimum (the resource name).

Types

type Reconciler

type Reconciler struct {
	ctrlruntimeclient.Client
	// contains filtered or unexported fields
}

func (*Reconciler) Reconcile

func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)