Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Add ¶
func Add(mgr manager.Manager, status *statusmanager.StatusManager, _ cnoclient.Client) error
Add controller and start it when the Manager is started.
Types ¶
type ReconcileCSR ¶
type ReconcileCSR struct {
// contains filtered or unexported fields
}
ReconcileCSR reconciles a cluster CertificateSigningRequest object. This will watch for changes to CertificateSigningRequest resources with SignerName == signerName. It will automatically approve these requests for signing. This assumes that the cluster has been configured in a way that no bad actors can make certificate signing requests. In future, we may decide to implement a scheme that would use a one-time token to validate a request.
All requests will be signed using a CA, that is currently generated by the OperatorPKI, and the signed certificate will be returned in the status.
This allows clients to get a signed certificate while maintaining private key confidentiality.
Source Files