clustercredentialscontroller

Documentation

Overview

Package clustercredentialscontroller contains a controller that watches Cluster objects and is responsible for moving inline credentials (from the CloudSpec) into dedicated Kubernetes Secrets in the KKP namespace. From there, this controller will replicate/sync the Secret into the relevant usercluster namespace. The controller will then watch the Secret in the KKP namespace and re-sync whenever necessary.

In a perfect future, we would not even ever create a Cluster with inline credentials, but for historical reasons it's the safest method to handle credentials for now. It is also super convenient that users do not have to manually create a Secret somewhere themselves.

Index

• Constants
• func Add(mgr manager.Manager, numWorkers int, workerName string, log *zap.SugaredLogger, ...) error

Constants

const (
	ControllerName = "kkp-cluster-credentials-controller"
)

Functions

func Add

func Add(
	mgr manager.Manager,
	numWorkers int,
	workerName string,
	log *zap.SugaredLogger,
	versions kubermatic.Versions,
	kkpNamespace string,
) error

Add creates a new cluster-credentials controller.