Documentation
¶
Overview ¶
Package certmanager provides a TLSBackend that emits cert-manager Issuer and Certificate custom resources. It relies on cert-manager running in the cluster to provision and renew the actual certificate Secret.
This subpackage is optional. Core packages must not import it directly. Importing it adds cert-manager API awareness at build time but does not require cert-manager to be installed at runtime (SSA will fail gracefully if the CRDs are absent).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type CertManagerBackend ¶
type CertManagerBackend[T object.MultiPhaseObject] struct{}
CertManagerBackend is a TLSBackend that emits cert-manager Issuer and Certificate custom resources. It supports two modes:
- Dedicated-CA: creates a self-signed Issuer, a CA Certificate, a CA Issuer, and leaf Certificate(s).
- Existing-CA: creates only leaf Certificate(s) referencing an existing Issuer or ClusterIssuer.
func NewCertManagerBackend ¶
func NewCertManagerBackend[T object.MultiPhaseObject]() *CertManagerBackend[T]
NewCertManagerBackend creates a new cert-manager backend.
func (*CertManagerBackend[T]) CertificateSecretName ¶
func (b *CertManagerBackend[T]) CertificateSecretName(o T, spec certificate.TLSSpec) string
CertificateSecretName returns the name of the Secret that cert-manager will create with the signed certificate.
func (*CertManagerBackend[T]) DesiredObjects ¶
func (b *CertManagerBackend[T]) DesiredObjects(ctx context.Context, o T, spec certificate.TLSSpec) ([]client.Object, error)
DesiredObjects returns cert-manager Issuer and Certificate objects based on the TLSSpec configuration.
func (*CertManagerBackend[T]) RequiresRotationSaga ¶
func (b *CertManagerBackend[T]) RequiresRotationSaga() bool
RequiresRotationSaga returns false — cert-manager handles renewal.
Source Files