package clustertrustbundle

import "k8s.io/kubernetes/pkg/kubelet/clustertrustbundle"

Package clustertrustbundle abstracts access to ClusterTrustBundles so that projected volumes can use them.

Index ¶

• type InformerManager
• func NewInformerManager(ctx context.Context, bundles certinformersv1alpha1.ClusterTrustBundleInformer, cacheSize int, cacheTTL time.Duration) (*InformerManager, error)
• func (m *InformerManager) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)
• func (m *InformerManager) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)
• type Manager
• type NoopManager
• func (m *NoopManager) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)
• func (m *NoopManager) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)

Types ¶

type InformerManager ¶

type InformerManager struct {
	// contains filtered or unexported fields
}

InformerManager is the "real" manager. It uses informers to track ClusterTrustBundle objects.

func NewInformerManager ¶

func NewInformerManager(ctx context.Context, bundles certinformersv1alpha1.ClusterTrustBundleInformer, cacheSize int, cacheTTL time.Duration) (*InformerManager, error)

NewInformerManager returns an initialized InformerManager.

func (*InformerManager) GetTrustAnchorsByName ¶

func (m *InformerManager) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)

GetTrustAnchorsByName returns normalized and deduplicated trust anchors from a single named ClusterTrustBundle.

func (*InformerManager) GetTrustAnchorsBySigner ¶

func (m *InformerManager) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)

GetTrustAnchorsBySigner returns normalized and deduplicated trust anchors from a set of selected ClusterTrustBundles.

type Manager ¶

type Manager interface {
	GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)
	GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)
}

Manager abstracts over the ability to get trust anchors.

type NoopManager ¶

type NoopManager struct{}

NoopManager always returns an error, for use in static kubelet mode.

func (*NoopManager) GetTrustAnchorsByName ¶

func (m *NoopManager) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)

GetTrustAnchorsByName implements Manager.

func (*NoopManager) GetTrustAnchorsBySigner ¶

func (m *NoopManager) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)

GetTrustAnchorsBySigner implements Manager.

Source Files ¶

clustertrustbundle_manager.go