encryptionkeys

package
v0.13.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Feb 29, 2024 License: Apache-2.0 Imports: 17 Imported by: 1

Documentation

Index

Constants

View Source
const (
	ControllerName = "policy-encryption-keys"
	// This is used for when an administrator prefers to manually generate the encryption keys
	// instead of letting the Policy Propagator handle it.
	DisableRotationAnnotation = "policy.open-cluster-management.io/disable-rotation"
)

Variables

This section is empty.

Functions

This section is empty.

Types

type EncryptionKeysReconciler

type EncryptionKeysReconciler struct {
	client.Client
	KeyRotationDays uint
	Scheme          *runtime.Scheme
}

EncryptionKeysReconciler is responsible for rotating the AES encryption key in the "policy-encryption-key" Secrets for all managed clusters.

func (*EncryptionKeysReconciler) Reconcile

func (r *EncryptionKeysReconciler) Reconcile(ctx context.Context, request ctrl.Request) (ctrl.Result, error)

Reconcile watches all "policy-encryption-key" Secrets on the Hub cluster. This periodically rotates the keys and resolves invalid modifications made to the Secret.

func (*EncryptionKeysReconciler) SetupWithManager

func (r *EncryptionKeysReconciler) SetupWithManager(mgr ctrl.Manager, maxConcurrentReconciles uint) error

SetupWithManager sets up the controller with the Manager.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL