import "istio.io/istio/pilot/pkg/secrets/kube"
const ( // The ID/name for the certificate chain in kubernetes generic secret. GenericScrtCert = "cert" // The ID/name for the private key in kubernetes generic secret. GenericScrtKey = "key" // The ID/name for the CA certificate in kubernetes generic secret. GenericScrtCaCert = "cacert" // The ID/name for the certificate chain in kubernetes tls secret. TLSSecretCert = "tls.crt" // The ID/name for the k8sKey in kubernetes tls secret. TLSSecretKey = "tls.key" // The ID/name for the CA certificate in kubernetes tls secret TLSSecretCaCert = "ca.crt" // GatewaySdsCaSuffix is the suffix of the sds resource name for root CA. All resource // names for gateway root certs end with "-cacert". GatewaySdsCaSuffix = "-cacert" )
DisableAuthorizationForTest makes the authorization check always pass. Should be used only for tests.
type AggregateController struct {
// contains filtered or unexported fields
}
func (a *AggregateController) AddEventHandler(f func(name string, namespace string))
func (a *AggregateController) Authorize(serviceAccount, namespace string) error
func (a *AggregateController) GetCaCert(name, namespace string) (cert []byte)
func (a *AggregateController) GetKeyAndCert(name, namespace string) (key []byte, cert []byte)
type Multicluster struct {
// contains filtered or unexported fields
}
Multicluster structure holds the remote kube Controllers and multicluster specific attributes.
func NewMulticluster(client kube.Client, localCluster, secretNamespace string, stop chan struct{}) *Multicluster
func (m *Multicluster) AddEventHandler(f func(name string, namespace string))
func (m *Multicluster) ForCluster(clusterID string) (secrets.Controller, error)
type RemoteKubeClientGetter func(clusterID string) kubernetes.Interface
type SecretsController struct {
// contains filtered or unexported fields
}
func NewSecretsController(client kube.Client, clusterID string) *SecretsController
func (s *SecretsController) AddEventHandler(f func(name string, namespace string))
func (s *SecretsController) Authorize(serviceAccount, namespace string) error
func (s *SecretsController) GetCaCert(name, namespace string) (cert []byte)
func (s *SecretsController) GetKeyAndCert(name, namespace string) (key []byte, cert []byte)
Package kube imports 19 packages (graph) and is imported by 4 packages. Updated 2021-01-09. Refresh now. Tools for package owners.