mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-14 18:30:21 +00:00
55 lines
2.3 KiB
Go
55 lines
2.3 KiB
Go
/*
|
|
Copyright 2014 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
// Package app implements a server that runs a stand-alone version of the
|
|
// certificates controller.
|
|
package app
|
|
|
|
import (
|
|
"time"
|
|
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
|
|
"github.com/spf13/pflag"
|
|
)
|
|
|
|
// GKECertificatesController is the main context object for the package.
|
|
type GKECertificatesController struct {
|
|
Kubeconfig string
|
|
ClusterSigningGKEKubeconfig string
|
|
ClusterSigningGKERetryBackoff metav1.Duration
|
|
ApproveAllKubeletCSRsForGroup string
|
|
}
|
|
|
|
// Create a new instance of a GKECertificatesController with default parameters.
|
|
func NewGKECertificatesController() *GKECertificatesController {
|
|
s := &GKECertificatesController{
|
|
ClusterSigningGKERetryBackoff: metav1.Duration{Duration: 500 * time.Millisecond},
|
|
}
|
|
return s
|
|
}
|
|
|
|
// AddFlags adds flags for a specific GKECertificatesController to the
|
|
// specified FlagSet.
|
|
func (s *GKECertificatesController) AddFlags(fs *pflag.FlagSet) {
|
|
fs.StringVar(&s.Kubeconfig, "kubeconfig", s.Kubeconfig, "Path to kubeconfig file with authorization and master location information.")
|
|
|
|
fs.StringVar(&s.ClusterSigningGKEKubeconfig, "cluster-signing-gke-kubeconfig", s.ClusterSigningGKEKubeconfig, "If set, use the kubeconfig file to call GKE to sign cluster-scoped certificates instead of using a local private key.")
|
|
fs.DurationVar(&s.ClusterSigningGKERetryBackoff.Duration, "cluster-signing-gke-retry-backoff", s.ClusterSigningGKERetryBackoff.Duration, "The initial backoff to use when retrying requests to GKE. Additional attempts will use exponential backoff.")
|
|
|
|
fs.StringVar(&s.ApproveAllKubeletCSRsForGroup, "insecure-experimental-approve-all-kubelet-csrs-for-group", s.ApproveAllKubeletCSRsForGroup, "The group for which the controller-manager will auto approve all CSRs for kubelet client certificates.")
|
|
}
|