ContainerImage.Pinniped/internal/controller/kubecertagent
Matt Moyer 657488fe90
Create CredentialIssuer at install, not runtime.
Previously, our controllers would automatically create a CredentialIssuer with a singleton name. The helpers we had for this also used "raw" client access and did not take advantage of the informer cache pattern.

With this change, the CredentialIssuer is always created at install time in the ytt YAML. The controllers now only update the existing CredentialIssuer status, and they do so using the informer cache as much as possible.

This change is targeted at only the kubecertagent controller to start. The impersonatorconfig controller will be updated in a following PR along with other changes.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-05-19 17:15:25 -05:00
..
mocks Add generated mocks for kubecertagent. 2021-04-26 08:19:45 -06:00
testdata WIP: start replacing the kubecertauthority pkg with a new controller 2020-09-22 17:45:20 -07:00
kubecertagent.go Create CredentialIssuer at install, not runtime. 2021-05-19 17:15:25 -05:00
kubecertagent_test.go Create CredentialIssuer at install, not runtime. 2021-05-19 17:15:25 -05:00
legacypodcleaner.go Add a new "legacy pod cleaner" controller. 2021-04-26 08:19:45 -06:00
legacypodcleaner_test.go Add a new "legacy pod cleaner" controller. 2021-04-26 08:19:45 -06:00
pod_command_executor.go Refactor kube-cert-agent controllers to use a Deployment. 2021-04-26 08:19:45 -06:00