operator

package

v0.5.1 Latest Latest Go to latest Published: Jul 18, 2026 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kubenexis/knxvault

Links

Open Source Insights

Documentation ¶

Overview ¶

Package operator is the KNXVault Kubernetes operator runtime.

Entry point: Run() in manager.go (cmd/operator). Controllers reconcile KNXVaultCA, Issuer/ClusterIssuer, Certificate, CertificateRequest, and optional Ingress annotations so clusters can use vault PKI without cert-manager.

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Run ¶

func Run() error

Run starts the controller-runtime manager and all reconcilers.

Types ¶

type Config ¶

type Config struct {
	VaultAddr   string
	VaultToken  string
	K8sRole     string
	SATokenPath string
	MetricsAddr string
	ProbeAddr   string
	IngressShim bool
	GatewayShim bool
	// ACMEHTTP01Addr when set serves /.well-known/acme-challenge/ for HTTP-01.
	ACMEHTTP01Addr string
	LeaderElect    bool
	LeaderElectID  string
	LeaderElectNS  string
	// ACMEEnabled when false rejects ACME issuer types (M-DTP-2 / W90-22).
	// Env: KNXVAULT_OPERATOR_ACME_ENABLED (default false — private-only).
	ACMEEnabled bool
}

Config holds operator runtime configuration.

func ConfigFromEnv ¶

func ConfigFromEnv() Config

ConfigFromEnv loads configuration from environment.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
apis
v1alpha1 Package v1alpha1 defines KNXVault operator CRD API types.	Package v1alpha1 defines KNXVault operator CRD API types.
certlogic Package certlogic holds pure certificate decision helpers (no k8s client).	Package certlogic holds pure certificate decision helpers (no k8s client).
cmcompat Package cmcompat maps cert-manager-shaped Certificate/Issuer fields onto KNXVault CRDs for migration (drop-in YAML conversion without running cert-manager).	Package cmcompat maps cert-manager-shaped Certificate/Issuer fields onto KNXVault CRDs for migration (drop-in YAML conversion without running cert-manager).
controllers
metrics Package metrics exports Prometheus metrics for the operator.	Package metrics exports Prometheus metrics for the operator.
reconcileutil Package reconcileutil provides reconcile result helpers (backoff + conditions taxonomy).	Package reconcileutil provides reconcile result helpers (backoff + conditions taxonomy).
renew Package renew computes certificate renewal timing for the operator.	Package renew computes certificate renewal timing for the operator.
secretutil Package secretutil builds kubernetes.io/tls Secrets for the operator.	Package secretutil builds kubernetes.io/tls Secrets for the operator.
statusutil Package statusutil helps set Ready/Issuing conditions.	Package statusutil helps set Ready/Issuing conditions.
vaultiface Package vaultiface abstracts KNXVault API calls used by the operator.	Package vaultiface abstracts KNXVault API calls used by the operator.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL