Documentation
¶
Overview ¶
Package secret implements the Secret in-use protection controller. It runs in the main falco operator (Deployment) and ensures that Secrets referenced by Rulesfile or Plugin artifact resources via spec.ociArtifact.registry.auth.secretRef cannot be deleted until all references are cleared.
Index ¶
Constants ¶
const ControllerName = "secret-in-use-finalizer"
ControllerName is the name of the Secret controller. It is also used as the field manager name for finalizer updates.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type SecretReconciler ¶
SecretReconciler protects Secrets that are referenced by Rulesfile or Plugin resources via spec.ociArtifact.registry.auth.secretRef.
func NewSecretReconciler ¶
func NewSecretReconciler(cl client.Client, scheme *runtime.Scheme) *SecretReconciler
NewSecretReconciler returns a new SecretReconciler.
func (*SecretReconciler) Reconcile ¶
Reconcile ensures the in-use finalizer is present on referenced Secrets and absent otherwise.
func (*SecretReconciler) SetupWithManager ¶
func (r *SecretReconciler) SetupWithManager(mgr ctrl.Manager) error
SetupWithManager registers the controller with the Manager.
Source Files