etcdcertsigner

func NewEtcdCertSignerController ¶

func NewEtcdCertSignerController(
	livenessChecker *health.MultiAlivenessChecker,
	kubeClient kubernetes.Interface,
	operatorClient v1helpers.StaticPodOperatorClient,
	kubeInformers v1helpers.KubeInformersForNamespaces,
	masterNodeInformer cache.SharedIndexInformer,
	masterNodeLister corev1listers.NodeLister,
	masterNodeSelector labels.Selector,
	eventRecorder events.Recorder,
	metricsRegistry metrics.KubeRegistry,
	forceSkipRollout bool,
	featureGateAccessor featuregates.FeatureGateAccess,
) (factory.Controller, error)

NewEtcdCertSignerController watches master nodes and maintains secrets for each master node, placing them in a single secret (NOT a tls secret) so that the revision controller only has to watch a single secret. This isn't ideal because it's possible to have a revision that is missing the content of a secret, but the actual static pod will fail if that happens and the later revision will pick it up.