forked from cert-manager/cert-manager
/
ca.go
60 lines (54 loc) · 1.77 KB
/
ca.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
package ca
import (
"k8s.io/client-go/kubernetes"
corelisters "k8s.io/client-go/listers/core/v1"
"k8s.io/client-go/tools/record"
"github.com/jetstack/cert-manager/pkg/apis/certmanager/v1alpha1"
clientset "github.com/jetstack/cert-manager/pkg/client/clientset/versioned"
"github.com/jetstack/cert-manager/pkg/issuer"
)
// CA is a simple CA implementation backed by the Kubernetes API server.
// A secret resource is used to store a CA public and private key that is then
// used to sign certificates.
type CA struct {
issuer v1alpha1.GenericIssuer
cl kubernetes.Interface
cmclient clientset.Interface
recorder record.EventRecorder
issuerResourcesNamespace string
secretsLister corelisters.SecretLister
}
func NewCA(issuer v1alpha1.GenericIssuer,
cl kubernetes.Interface,
cmclient clientset.Interface,
recorder record.EventRecorder,
issuerResourcesNamespace string,
secretsLister corelisters.SecretLister) (issuer.Interface, error) {
return &CA{
issuer: issuer,
cl: cl,
cmclient: cmclient,
recorder: recorder,
issuerResourcesNamespace: issuerResourcesNamespace,
secretsLister: secretsLister,
}, nil
}
const (
ControllerName = "ca"
)
func init() {
issuer.Register(ControllerName, func(issuer v1alpha1.GenericIssuer, ctx *issuer.Context) (issuer.Interface, error) {
issuerResourcesNamespace := issuer.GetObjectMeta().Namespace
if issuerResourcesNamespace == "" {
issuerResourcesNamespace = ctx.ClusterResourceNamespace
}
return NewCA(
issuer,
ctx.Client,
ctx.CMClient,
ctx.Recorder,
issuerResourcesNamespace,
ctx.KubeSharedInformerFactory.Core().V1().Secrets().Lister(),
)
})
}