Documentation
¶
Index ¶
- Constants
- Variables
- func GetDefaultDexConfigSecret(name string, namespace string) *corev1.Secret
- func GetDexSecretConfig(n types.NamespacedName) v1alpha1.AppExtraConfig
- func GetIssuerAddress(baseDomain string, managementClusterIssuerAddress string, ...) string
- func GetVintageDexSecretConfig(namespace string) v1alpha1.AppExtraConfig
- func IsInvalidConfig(err error) bool
- type Config
- type ProviderCredentialUpdate
- type Service
- func (s *Service) CheckAndRotateServiceCredentials(ctx context.Context) error
- func (s *Service) CreateOrUpdateProviderApps(appConfig provider.AppConfig, ctx context.Context, ...) (dex.DexConfig, error)
- func (s *Service) DeleteProviderApps(appName string, ctx context.Context) error
- func (s *Service) GetAppConfig(ctx context.Context) (provider.AppConfig, error)
- func (s *Service) Reconcile(ctx context.Context) error
- func (s *Service) ReconcileDelete(ctx context.Context) error
Constants ¶
View Source
const ( // CredentialsSecretName is the standard name for dex-operator credentials CredentialsSecretName = "dex-operator-credentials" // SelfRenewalAnnotation marks when self-renewal was performed SelfRenewalAnnotation = "dex-operator.giantswarm.io/last-self-renewal" )
Variables ¶
View Source
var ( AppInfo = prometheus.NewGaugeVec( prometheus.GaugeOpts{ Namespace: metricNamespace, Subsystem: metricSubsystem, Name: "secret_expiry_time", Help: "Gives secret expiry time for all dex app registrations.", }, infoLabels, ) )
Gauge for secret expiry time
Functions ¶
func GetDefaultDexConfigSecret ¶ added in v0.4.0
func GetDexSecretConfig ¶
func GetDexSecretConfig(n types.NamespacedName) v1alpha1.AppExtraConfig
GetDexSecretConfig returns the AppExtraConfig for the dex secret This is used by both the App CR and for test compatibility
func GetIssuerAddress ¶ added in v0.3.2
func GetVintageDexSecretConfig ¶ added in v0.4.0
func GetVintageDexSecretConfig(namespace string) v1alpha1.AppExtraConfig
GetVintageDexSecretConfig returns the AppExtraConfig for vintage dex secret format
func IsInvalidConfig ¶
IsInvalidcConfig asserts invalidConfigError.
Types ¶
type Config ¶
type Config struct {
Client client.Client
Log logr.Logger
Target dextarget.DexTarget
Providers []provider.Provider
ManagementClusterBaseDomain string
ManagementClusterName string
ManagementClusterIssuerAddress string
// Owner is the object that owns the created secrets (HelmRelease or App).
// This is used to set OwnerReferences on the secrets so that changes to
// owned secrets trigger reconciliation of the owner.
Owner client.Object
// Scheme is required for setting OwnerReferences.
Scheme *runtime.Scheme
// Deprecated: Use Target instead. App is kept for backward compatibility.
// If Target is nil and App is set, App will be wrapped in an AppTarget.
App *v1alpha1.App
}
type ProviderCredentialUpdate ¶ added in v0.14.0
type Service ¶
func (*Service) CheckAndRotateServiceCredentials ¶ added in v0.14.0
CheckAndRotateServiceCredentials checks if any providers need credential rotation and performs it
func (*Service) CreateOrUpdateProviderApps ¶
func (*Service) DeleteProviderApps ¶
func (*Service) GetAppConfig ¶
Click to show internal directories.
Click to hide internal directories.