Directories
¶
| Path | Synopsis |
|---|---|
|
Package acme implements ACME (RFC 8555) certificate issuance for knxvault-operator multi-issuer support — HTTP-01 and DNS-01 challenges, plus self-signed issuance.
|
Package acme implements ACME (RFC 8555) certificate issuance for knxvault-operator multi-issuer support — HTTP-01 and DNS-01 challenges, plus self-signed issuance. |
|
vaultstore
Package vaultstore is a placeholder for optional ACME state in knxvault (M-ACME-2 / W60-16).
|
Package vaultstore is a placeholder for optional ACME state in knxvault (M-ACME-2 / W60-16). |
|
Package api wires the HTTP API layer.
|
Package api wires the HTTP API layer. |
|
dto
Package dto defines HTTP request and response models.
|
Package dto defines HTTP request and response models. |
|
middleware
Package middleware provides HTTP middleware for the API layer.
|
Package middleware provides HTTP middleware for the API layer. |
|
Package app bootstraps and runs the KNXVault HTTP server.
|
Package app bootstraps and runs the KNXVault HTTP server. |
|
Package audit provides append-only audit logging (LLD §4.D).
|
Package audit provides append-only audit logging (LLD §4.D). |
|
Package backup exports and restores encrypted KNXVault state snapshots.
|
Package backup exports and restores encrypted KNXVault state snapshots. |
|
Package cache provides optional Valkey read-through caching (W33-01–02).
|
Package cache provides optional Valkey read-through caching (W33-01–02). |
|
compat
|
|
|
vault
Package vault implements the HashiCorp Vault product profile used by cert-manager's built-in Vault issuer.
|
Package vault implements the HashiCorp Vault product profile used by cert-manager's built-in Vault issuer. |
|
Package config loads and validates KNXVault runtime configuration.
|
Package config loads and validates KNXVault runtime configuration. |
|
Package crypto provides envelope encryption and OpenSSL integration (LLD §4).
|
Package crypto provides envelope encryption and OpenSSL integration (LLD §4). |
|
autounseal
Package autounseal decrypts the operational unseal key using an external KEK (W63 / P3).
|
Package autounseal decrypts the operational unseal key using an external KEK (W63 / P3). |
|
masterkey
Package masterkey loads the application master encryption key.
|
Package masterkey loads the application master encryption key. |
|
memzero
Package memzero securely zeroes sensitive byte slices.
|
Package memzero securely zeroes sensitive byte slices. |
|
pki
Package pki provides pluggable PKI certificate issuance backends.
|
Package pki provides pluggable PKI certificate issuance backends. |
|
shamir
Package shamir implements Shamir's Secret Sharing over GF(2^8) for unseal shares.
|
Package shamir implements Shamir's Secret Sharing over GF(2^8) for unseal shares. |
|
tlsconfig
Package tlsconfig loads TLS certificate material for servers and clients.
|
Package tlsconfig loads TLS certificate material for servers and clients. |
|
x509native
Package x509native provides Go-native X.509 parsing and verification.
|
Package x509native provides Go-native X.509 parsing and verification. |
|
domain
|
|
|
common
Package common provides shared domain primitives.
|
Package common provides shared domain primitives. |
|
pki
Package pki defines PKI domain entities (CA, Certificate, CRL).
|
Package pki defines PKI domain entities (CA, Certificate, CRL). |
|
secrets
Package secrets defines secrets domain entities (SecretVersion, Lease).
|
Package secrets defines secrets domain entities (SecretVersion, Lease). |
|
Package engine defines secret and PKI engine interfaces (LLD §4).
|
Package engine defines secret and PKI engine interfaces (LLD §4). |
|
pki
Package pki implements the PKI engine (LLD §4.A).
|
Package pki implements the PKI engine (LLD §4.A). |
|
secrets
Package secrets implements the KVv2 secrets engine (LLD §4.B).
|
Package secrets implements the KVv2 secrets engine (LLD §4.B). |
|
secrets/cubbyhole
Package cubbyhole implements per-token private KV storage (M-WRAP-1 / W74).
|
Package cubbyhole implements per-token private KV storage (M-WRAP-1 / W74). |
|
secrets/database
Package database implements the dynamic database credentials engine (LLD §4.B, Phase 2).
|
Package database implements the dynamic database credentials engine (LLD §4.B, Phase 2). |
|
secrets/ssh
Package ssh implements dynamic OpenSSH user certificate credentials (signed-key mode).
|
Package ssh implements dynamic OpenSSH user certificate credentials (signed-key mode). |
|
transit
Package transit implements Encryption-as-a-Service (M-TRANSIT-1).
|
Package transit implements Encryption-as-a-Service (M-TRANSIT-1). |
|
Package eso provides an External Secrets Operator webhook adapter for KNXVault.
|
Package eso provides an External Secrets Operator webhook adapter for KNXVault. |
|
infra
|
|
|
hostidentity
Package hostidentity resolves pod hostname and StatefulSet ordinal node IDs.
|
Package hostidentity resolves pod hostname and StatefulSet ordinal node IDs. |
|
k8s
Package k8s provides Kubernetes integrations (LLD §6.2 HA).
|
Package k8s provides Kubernetes integrations (LLD §6.2 HA). |
|
leader
Package leader provides HA leader election abstractions (LLD §6.2).
|
Package leader provides HA leader election abstractions (LLD §6.2). |
|
metrics
Package metrics exposes Prometheus instrumentation (LLD observability).
|
Package metrics exposes Prometheus instrumentation (LLD observability). |
|
tracing
Package tracing configures OpenTelemetry distributed tracing.
|
Package tracing configures OpenTelemetry distributed tracing. |
|
Package inject renders secrets for sidecar, init-container, and CSI injection (W18).
|
Package inject renders secrets for sidecar, init-container, and CSI injection (W18). |
|
csi
Package csi defines the Secrets Store CSI provider contract.
|
Package csi defines the Secrets Store CSI provider contract. |
|
Package netutil holds shared network validation helpers.
|
Package netutil holds shared network validation helpers. |
|
Package notify delivers outbound webhook notifications.
|
Package notify delivers outbound webhook notifications. |
|
Package operator is the KNXVault Kubernetes operator runtime.
|
Package operator is the KNXVault Kubernetes operator runtime. |
|
apis/v1alpha1
Package v1alpha1 defines KNXVault operator CRD API types.
|
Package v1alpha1 defines KNXVault operator CRD API types. |
|
certlogic
Package certlogic holds pure certificate decision helpers (no k8s client).
|
Package certlogic holds pure certificate decision helpers (no k8s client). |
|
cmcompat
Package cmcompat maps cert-manager-shaped Certificate/Issuer fields onto KNXVault CRDs for migration (drop-in YAML conversion without running cert-manager).
|
Package cmcompat maps cert-manager-shaped Certificate/Issuer fields onto KNXVault CRDs for migration (drop-in YAML conversion without running cert-manager). |
|
metrics
Package metrics exports Prometheus metrics for the operator.
|
Package metrics exports Prometheus metrics for the operator. |
|
reconcileutil
Package reconcileutil provides reconcile result helpers (backoff + conditions taxonomy).
|
Package reconcileutil provides reconcile result helpers (backoff + conditions taxonomy). |
|
renew
Package renew computes certificate renewal timing for the operator.
|
Package renew computes certificate renewal timing for the operator. |
|
secretutil
Package secretutil builds kubernetes.io/tls Secrets for the operator.
|
Package secretutil builds kubernetes.io/tls Secrets for the operator. |
|
statusutil
Package statusutil helps set Ready/Issuing conditions.
|
Package statusutil helps set Ready/Issuing conditions. |
|
vaultiface
Package vaultiface abstracts KNXVault API calls used by the operator.
|
Package vaultiface abstracts KNXVault API calls used by the operator. |
|
Package raft implements the Dragonboat-backed vault state machine.
|
Package raft implements the Dragonboat-backed vault state machine. |
|
Package repository defines persistence interfaces (LLD §4.D.3).
|
Package repository defines persistence interfaces (LLD §4.D.3). |
|
dragonboat
Package dragonboat provides repository adapters over the vault Raft client.
|
Package dragonboat provides repository adapters over the vault Raft client. |
|
memory
Package memory provides in-memory repository implementations for unit tests.
|
Package memory provides in-memory repository implementations for unit tests. |
|
tenant
Package tenantrepo wraps repositories with tenant path isolation (W32-03).
|
Package tenantrepo wraps repositories with tenant path isolation (W32-03). |
|
Package service orchestrates business workflows.
|
Package service orchestrates business workflows. |
|
Package sys tracks one-time bootstrap state.
|
Package sys tracks one-time bootstrap state. |
|
Package tenant provides multi-tenancy context propagation (W32-01–05).
|
Package tenant provides multi-tenancy context propagation (W32-01–05). |
|
Package utils holds shared helpers (validation, retry, parsing).
|
Package utils holds shared helpers (validation, retry, parsing). |
|
Package version holds KNXVault release and build metadata.
|
Package version holds KNXVault release and build metadata. |
|
Package webhook implements Kubernetes admission hooks for KNXVault.
|
Package webhook implements Kubernetes admission hooks for KNXVault. |
Click to show internal directories.
Click to hide internal directories.