venafi

Documentation

Index

• Constants
• type Venafi
  • func NewVenafi(ctx *controllerpkg.Context) *Venafi
  • func (v *Venafi) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, ...) error

Constants

const (
	CSRControllerName = "certificatesigningrequests-issuer-venafi"
)

Types

type Venafi

type Venafi struct {
	// contains filtered or unexported fields
}

Venafi is a Kubernetes CertificateSigningRequest controller, responsible for signing CertificateSigningRequests that reference a cert-manager Venafi Issuer or ClusterIssuer

func NewVenafi

func NewVenafi(ctx *controllerpkg.Context) *Venafi

func (*Venafi) Sign

func (v *Venafi) Sign(ctx context.Context, csr *certificatesv1.CertificateSigningRequest, issuerObj cmapi.GenericIssuer) error

Sign attempts to sign the given CertificateSigningRequest based on the provided Venafi Issuer or ClusterIssuer. This function will update the resource if signing was successful. Returns an error which, if not nil, should trigger a retry. Since this signer takes some time to sign the request, this controller will set a "pick ID" annotation value that is used to fetch the latest state of the request in subsequent re-syncs. The re-syncs are triggered by using the workqueue's back-off mechanism.