signercontroller

package
v0.5.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 14, 2026 License: Apache-2.0 Imports: 17 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Controller

type Controller struct {
	// contains filtered or unexported fields
}

Controller is an in-memory signing controller for PodCertificateRequests.

func New

func New(clock clock.PassiveClock, handler SignerImpl, hasher Hasher, pcrClient *podcertificate.Client, trustBundles *clustertrustbundle.Client) *Controller

New creates a new Controller.

func (*Controller) Run

func (c *Controller) Run(ctx context.Context, workers int)

Run waits for the shared informer to sync, then processes this signer's queue. The caller must start the informer separately.

type Hasher

type Hasher interface {
	AssignedToThisReplica(ctx context.Context, item string) bool
}

type SignerImpl

type SignerImpl interface {
	SignerName() string
	DesiredClusterTrustBundles() ([]*certsv1.ClusterTrustBundle, error)
	MakeCert(context.Context, *certsv1beta1.PodCertificateRequest) error
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL