clustertrustbundle

package
v1.33.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 23, 2025 License: Apache-2.0 Imports: 19 Imported by: 0

Documentation

Overview

Package clustertrustbundle abstracts access to ClusterTrustBundles so that projected volumes can use them.

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type InformerManager

type InformerManager[T clusterTrustBundle] struct {
	// contains filtered or unexported fields
}

InformerManager is the "real" manager. It uses informers to track ClusterTrustBundle objects.

func (*InformerManager[T]) GetTrustAnchorsByName

func (m *InformerManager[T]) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)

GetTrustAnchorsByName returns normalized and deduplicated trust anchors from a single named ClusterTrustBundle.

func (*InformerManager[T]) GetTrustAnchorsBySigner

func (m *InformerManager[T]) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)

GetTrustAnchorsBySigner returns normalized and deduplicated trust anchors from a set of selected ClusterTrustBundles.

type LazyInformerManager added in v1.33.0

type LazyInformerManager struct {
	// contains filtered or unexported fields
}

LazyInformerManager decides whether to use the noop or the actual manager on a call to the manager's methods. We cannot determine this upon startup because some may rely on the kubelet to be fully running in order to setup their kube-apiserver.

func (*LazyInformerManager) GetTrustAnchorsByName added in v1.33.0

func (m *LazyInformerManager) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)

func (*LazyInformerManager) GetTrustAnchorsBySigner added in v1.33.0

func (m *LazyInformerManager) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)

type Manager

type Manager interface {
	GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)
	GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)
}

Manager abstracts over the ability to get trust anchors.

func NewAlphaInformerManager added in v1.33.0

func NewAlphaInformerManager(
	ctx context.Context, informerFactory informers.SharedInformerFactory, cacheSize int, cacheTTL time.Duration,
) (Manager, error)

func NewBetaInformerManager added in v1.33.0

func NewBetaInformerManager(
	ctx context.Context, informerFactory informers.SharedInformerFactory, cacheSize int, cacheTTL time.Duration,
) (Manager, error)

func NewLazyInformerManager added in v1.33.0

func NewLazyInformerManager(ctx context.Context, kubeClient clientset.Interface, cacheSize int) Manager

type NoopManager

type NoopManager struct{}

NoopManager always returns an error, for use in static kubelet mode.

func (*NoopManager) GetTrustAnchorsByName

func (m *NoopManager) GetTrustAnchorsByName(name string, allowMissing bool) ([]byte, error)

GetTrustAnchorsByName implements Manager.

func (*NoopManager) GetTrustAnchorsBySigner

func (m *NoopManager) GetTrustAnchorsBySigner(signerName string, labelSelector *metav1.LabelSelector, allowMissing bool) ([]byte, error)

GetTrustAnchorsBySigner implements Manager.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL