certificate

Documentation

Index

• Variables
• func IsCSRInTerminalState(csr metav1.Object) bool
• func NewCSRApprovingController(kubeClient kubernetes.Interface, ...) factory.Controller
• func NewCSRSignController(kubeClient kubernetes.Interface, ...) factory.Controller

Variables

var (
	// EnableV1Beta1CSRCompatibility is a condition variable that enables/disables
	// the compatibility with V1beta1 CSR api. If enabled, the CSR approver
	// controller wil watch and approve over the V1beta1 CSR api instead of V1.
	// Setting the variable to false will make the CSR signer controller strictly
	// requires V1 CSR api.
	//
	// The distinction between V1 and V1beta1 CSR is that the latter doesn't have
	// a "signerName" field which is used for discriminating external certificate
	// signers. With that being said, under V1beta1 CSR api once a CSR object is
	// approved, it will be immediately signed by the CSR signer controller from
	// kube-controller-manager. So the csr signer controller will be permanently
	// disabled to avoid conflict with Kubernetes' original CSR signer.
	//
	// TODO: Remove this condition gate variable after V1beta1 CSR api fades away
	//       in the Kubernetes community. The code blocks supporting V1beta1 CSR
	//       should also be removed.
	EnableV1Beta1CSRCompatibility = true
)

Functions

func IsCSRInTerminalState

func IsCSRInTerminalState(csr metav1.Object) bool

Check whether a CSR is in terminal state

func NewCSRApprovingController

func NewCSRApprovingController(
	kubeClient kubernetes.Interface,
	clusterInformers clusterinformers.ManagedClusterInformer,
	csrV1Informer certificatesinformers.CertificateSigningRequestInformer,
	csrBetaInformer v1beta1certificatesinformers.CertificateSigningRequestInformer,
	addonInformers addoninformerv1alpha1.ManagedClusterAddOnInformer,
	agentAddons map[string]agent.AgentAddon,
) factory.Controller

NewCSRApprovingController creates a new csr approving controller

func NewCSRSignController

func NewCSRSignController(
	kubeClient kubernetes.Interface,
	clusterInformers clusterinformers.ManagedClusterInformer,
	csrInformer certificatesinformers.CertificateSigningRequestInformer,
	addonInformers addoninformerv1alpha1.ManagedClusterAddOnInformer,
	agentAddons map[string]agent.AgentAddon,
) factory.Controller

NewCSRApprovingController creates a new csr approving controller