certificates

Documentation

Overview

Package certificates implements an abstract controller that is useful for building controllers that manage CSRs

Index

• func GetCertApprovalCondition(status *certificates.CertificateSigningRequestStatus) (approved bool, denied bool)
• func HasTrueCondition(csr *certificates.CertificateSigningRequest, ...) bool
• func IgnorableError(s string, args ...interface{}) ignorableError
• func IsCertificateRequestApproved(csr *certificates.CertificateSigningRequest) bool
• type CertificateController
  • func NewCertificateController(name string, kubeClient clientset.Interface, ...) *CertificateController
  • func (cc *CertificateController) Run(workers int, stopCh <-chan struct{})

Functions

func GetCertApprovalCondition

func GetCertApprovalCondition(status *certificates.CertificateSigningRequestStatus) (approved bool, denied bool)

func HasTrueCondition

func HasTrueCondition(csr *certificates.CertificateSigningRequest, conditionType certificates.RequestConditionType) bool

HasTrueCondition returns true if the csr contains a condition of the specified type with a status that is set to True or is empty

func IgnorableError

func IgnorableError(s string, args ...interface{}) ignorableError

IgnorableError returns an error that we shouldn't handle (i.e. log) because it's spammy and usually user error. Instead we will log these errors at a higher log level. We still need to throw these errors to signal that the sync should be retried.

func IsCertificateRequestApproved

func IsCertificateRequestApproved(csr *certificates.CertificateSigningRequest) bool

IsCertificateRequestApproved returns true if a certificate request has the "Approved" condition and no "Denied" conditions; false otherwise.

Types

type CertificateController

type CertificateController struct {
	// contains filtered or unexported fields
}

func NewCertificateController

func NewCertificateController(
	name string,
	kubeClient clientset.Interface,
	csrInformer certificatesinformers.CertificateSigningRequestInformer,
	handler func(*certificates.CertificateSigningRequest) error,
) *CertificateController

func (*CertificateController) Run

func (cc *CertificateController) Run(workers int, stopCh <-chan struct{})

Run the main goroutine responsible for watching and syncing jobs.