Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
Types ¶
type VaultAuthReconciler ¶
type VaultAuthReconciler struct {
client.Client
Scheme *runtime.Scheme
Recorder record.EventRecorder
ClientFactory vault.CachingClientFactory
}
VaultAuthReconciler reconciles a VaultAuth object
func (*VaultAuthReconciler) Reconcile ¶
Reconcile reconciles the secretsv1alpha1.VaultAuth resource. Each reconciliation will validate the resource's configuration
Upon deletion of the resource, it will prune all referent Vault Client(s).
func (*VaultAuthReconciler) SetupWithManager ¶
func (r *VaultAuthReconciler) SetupWithManager(mgr ctrl.Manager) error
SetupWithManager sets up the controller with the Manager.
type VaultConnectionReconciler ¶
type VaultConnectionReconciler struct {
client.Client
Scheme *runtime.Scheme
Recorder record.EventRecorder
ClientFactory vault.CachingClientFactory
}
VaultConnectionReconciler reconciles a VaultConnection object
func (*VaultConnectionReconciler) Reconcile ¶
func (r *VaultConnectionReconciler) Reconcile(ctx context.Context, req ctrl.Request) (result ctrl.Result, err error)
Reconcile reconciles the secretsv1alpha1.VaultConnection resource. Upon a reconciliation it will verify that the configured Vault connection is valid.
Upon deletion of the resource, it will prune all referent Vault Client(s).
func (*VaultConnectionReconciler) SetupWithManager ¶
func (r *VaultConnectionReconciler) SetupWithManager(mgr ctrl.Manager) error
SetupWithManager sets up the controller with the Manager.
type VaultDynamicSecretReconciler ¶
type VaultDynamicSecretReconciler struct {
client.Client
Scheme *runtime.Scheme
Recorder record.EventRecorder
ClientFactory vault.ClientFactory
// contains filtered or unexported fields
}
VaultDynamicSecretReconciler reconciles a VaultDynamicSecret object
func (*VaultDynamicSecretReconciler) Reconcile ¶
func (r *VaultDynamicSecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
Reconcile ensures that the VaultDynamicSecret Custom Resource is synced from Vault to its configured Kubernetes secret. The resource will periodically be reconciled to renew the dynamic secrets lease in Vault. If the renewal fails for any reason then the secret will be re-synced from Vault aka. rotated. If a secret rotation occurs and the resource has RolloutRestartTargets configured, then a request to "rollout restart" the configured Deployment, StatefulSet, ReplicaSet will be made to Kubernetes.
func (*VaultDynamicSecretReconciler) SetupWithManager ¶
func (r *VaultDynamicSecretReconciler) SetupWithManager(mgr ctrl.Manager, opts controller.Options) error
SetupWithManager sets up the controller with the Manager.
type VaultPKISecretReconciler ¶
type VaultPKISecretReconciler struct {
client.Client
Scheme *runtime.Scheme
ClientFactory vault.ClientFactory
Recorder record.EventRecorder
}
VaultPKISecretReconciler reconciles a VaultPKISecret object
func (*VaultPKISecretReconciler) Reconcile ¶
func (r *VaultPKISecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
Reconcile is part of the main kubernetes reconciliation loop which aims to move the current state of the cluster closer to the desired state. It compares the state specified by the VaultPKISecret object against the actual cluster state, and then performs operations to make the cluster state reflect the state specified by the user.
func (*VaultPKISecretReconciler) SetupWithManager ¶
func (r *VaultPKISecretReconciler) SetupWithManager(mgr ctrl.Manager) error
SetupWithManager sets up the controller with the Manager.
type VaultStaticSecretReconciler ¶
type VaultStaticSecretReconciler struct {
client.Client
Scheme *runtime.Scheme
Recorder record.EventRecorder
ClientFactory vault.ClientFactory
HMACFunc vault.HMACFromSecretFunc
ValidateMACFunc vault.ValidateMACFromSecretFunc
}
VaultStaticSecretReconciler reconciles a VaultStaticSecret object
func (*VaultStaticSecretReconciler) SetupWithManager ¶
func (r *VaultStaticSecretReconciler) SetupWithManager(mgr ctrl.Manager) error
Source Files