creation

Documentation

Index

• Constants
• func NewRevocationDesiresController(resourcesDBClient corecosmosstorage.ResourcesDBClient, ...) controllerutils.Controller
• func NewRevocationMarkRequestsController(clock utilsclock.PassiveClock, ...) controllerutils.Controller

Constants

const RevocationDesiresControllerName = "SystemAdminCredentialRevocationDesires"

RevocationDesiresControllerName is the controller name, recorded on every desire this controller authors via kubeapplierapi.TagControllerName.

Functions

func NewRevocationDesiresController

func NewRevocationDesiresController(
	resourcesDBClient corecosmosstorage.ResourcesDBClient,
	kubeApplierDBClients kubeappliercosmosstorage.KubeApplierDBClients,
	backendInformers coreinformers.BackendInformers,
	kubeApplierInformers *unionkubeapplierinformers.UnionKubeApplierInformers,
	applyDesireLister dblisters.ApplyDesireLister,
	readDesireLister dblisters.ReadDesireLister,
) controllerutils.Controller

NewRevocationDesiresController returns a RevocationWatchingController that manages the CertificateRevocationRequest (CRR) desires used to revoke a cluster's already-issued certificates. It creates the CRR ApplyDesire and CRR ReadDesire so the hosted cluster can process the revocation. Observing the CRR for confirmation and marking the revocation complete is handled by the separate revocation-completion controller.

func NewRevocationMarkRequestsController

func NewRevocationMarkRequestsController(
	clock utilsclock.PassiveClock,
	resourcesDBClient corecosmosstorage.ResourcesDBClient,
	backendInformers coreinformers.BackendInformers,
) controllerutils.Controller

NewRevocationMarkRequestsController returns a RevocationWatchingController that performs the first step of a revocation: it does a live list of every SystemAdminCredentialRequest for the cluster and marks each one with a DeletionTimestamp so the per-credential deletion controller tears it down. Once every credential request is marked, it sets CredentialsMarkedForDeletion=True on the revocation.