Documentation
¶
Overview ¶
Package controller implements the CertificateSigningRequest signing controller behind the kubeca command.
StartCertificateSigningRequestController builds a controller-runtime manager, loads the crypto provider and the xpki authority.Authority from the configured files and registers CertificateSigningRequestSigningReconciler, which signs every CSR without a Denied condition (KUBECA-001) whose signerName maps to a loaded issuer and profile.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func StartCertificateSigningRequestController ¶
func StartCertificateSigningRequestController(f *CertificateSigningRequestControllerFlags) error
StartCertificateSigningRequestController starts controller loop
Types ¶
type CertificateSigningRequestControllerFlags ¶
type CertificateSigningRequestControllerFlags struct {
MetricsAddr string
EnableLeaderElection bool
LeaderElectionID string
CaCfgPath string
HsmCfgPath string
}
CertificateSigningRequestControllerFlags provides controller flags
type CertificateSigningRequestSigningReconciler ¶
type CertificateSigningRequestSigningReconciler struct {
client.Client
//Log logr.Logger
Scheme *runtime.Scheme
Authority *authority.Authority
EventRecorder record.EventRecorder
}
CertificateSigningRequestSigningReconciler reconciles a CertificateSigningRequest object
func (*CertificateSigningRequestSigningReconciler) Reconcile ¶
func (r *CertificateSigningRequestSigningReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
Reconcile implementation
func (*CertificateSigningRequestSigningReconciler) SetupWithManager ¶
func (r *CertificateSigningRequestSigningReconciler) SetupWithManager(mgr ctrl.Manager) error
SetupWithManager allows to set up controller manager
Source Files