secret_ca_elasticsearch_builder.go

package kibana

import (
	kibanacrd "github.com/webcenter-fr/elasticsearch-operator/apis/kibana/v1"
	corev1 "k8s.io/api/core/v1"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
)

// BuildCAElasticsearchSecret permit to build CA secret from Elasticsearch ApiPKI
func buildCAElasticsearchSecrets(kb *kibanacrd.Kibana, secretCaElasticsearch *corev1.Secret) (secrets []corev1.Secret, err error) {

	if secretCaElasticsearch == nil {
		return nil, nil
	}

	secrets = []corev1.Secret{
		{
			ObjectMeta: metav1.ObjectMeta{
				Name:        GetSecretNameForCAElasticsearch(kb),
				Namespace:   kb.Namespace,
				Labels:      getLabels(kb),
				Annotations: getAnnotations(kb),
			},
			Type: corev1.SecretTypeOpaque,
			Data: map[string][]byte{
				"ca.crt": secretCaElasticsearch.Data["ca.crt"],
			},
		},
	}

	return secrets, nil
}