identity

func GenerateIdentitySecret ¶

func GenerateIdentitySecret(ctx context.Context, namespace, name string) (*corev1.Secret, error)

GenerateIdentitySecret creates a Kubernetes Secret containing a randomly generated identity key used for APIExport identity.

The secret will be created in the given namespace with the provided name. The identity key is stored in StringData under apisv1alpha1.SecretKeyAPIExportIdentity.

A warning is logged if key generation takes longer than 100ms.

func IdentityHash ¶

func IdentityHash(secret *corev1.Secret) (string, error)

IdentityHash computes a SHA-256 hash of the identity key stored in the given Secret.

The identity key is expected to be present in secret.Data under apisv1alpha1.SecretKeyAPIExportIdentity.