creation

Documentation

Index

• Constants
• func NewDesiresCreatorController(resourcesDBClient corecosmosstorage.ResourcesDBClient, ...) controllerutils.Controller
• func NewIssuanceObserverController(clock utilsclock.PassiveClock, ...) controllerutils.Controller

Constants

const DesiresCreatorControllerName = "SystemAdminCredentialDesiresCreator"

DesiresCreatorControllerName is the controller name, recorded on every desire this controller authors via kubeapplierapi.TagControllerName.

Functions

func NewDesiresCreatorController

func NewDesiresCreatorController(
	resourcesDBClient corecosmosstorage.ResourcesDBClient,
	kubeApplierDBClients kubeappliercosmosstorage.KubeApplierDBClients,
	backendInformers coreinformers.BackendInformers,
	kubeApplierInformers *unionkubeapplierinformers.UnionKubeApplierInformers,
) controllerutils.Controller

NewDesiresCreatorController returns a CredentialRequestWatchingController that creates the per-credential ApplyDesires (CSR, CSRApproval) and ReadDesire (CSR) for individual SystemAdminCredentialRequest documents that are pending.

The controller also fires on ReadDesire changes and consults the ApplyDesire / ReadDesire listers before writing so it skips the create entirely when a desire already exists with the desired content.

func NewIssuanceObserverController

func NewIssuanceObserverController(
	clock utilsclock.PassiveClock,
	resourcesDBClient corecosmosstorage.ResourcesDBClient,
	backendInformers coreinformers.BackendInformers,
	kubeApplierInformers *unionkubeapplierinformers.UnionKubeApplierInformers,
	readDesireLister dblisters.ReadDesireLister,
) controllerutils.Controller

NewIssuanceObserverController returns a CredentialRequestWatchingController that observes the mirrored CSR from the ReadDesire and transitions individual SystemAdminCredentialRequest documents from Pending → Issued (or Failed).