
This adds a new stand-alone certificates controller for use on GKE. It allows calling GKE to sign certificates instead of requiring the CA private key locally. It does not aim for 100% feature parity with kube-controller-manager yet, so for instance, leader election support is omitted.
45 lines
964 B
Python
45 lines
964 B
Python
package(default_visibility = ["//visibility:public"])
|
|
|
|
licenses(["notice"])
|
|
|
|
load(
|
|
"@io_bazel_rules_go//go:def.bzl",
|
|
"go_binary",
|
|
"go_library",
|
|
)
|
|
|
|
go_library(
|
|
name = "go_default_library",
|
|
srcs = ["main.go"],
|
|
tags = ["automanaged"],
|
|
deps = [
|
|
"//cmd/gke-certificates-controller/app:go_default_library",
|
|
"//pkg/util/logs:go_default_library",
|
|
"//pkg/version/verflag:go_default_library",
|
|
"//vendor:github.com/spf13/pflag",
|
|
"//vendor:k8s.io/apiserver/pkg/util/flag",
|
|
],
|
|
)
|
|
|
|
filegroup(
|
|
name = "package-srcs",
|
|
srcs = glob(["**"]),
|
|
tags = ["automanaged"],
|
|
visibility = ["//visibility:private"],
|
|
)
|
|
|
|
filegroup(
|
|
name = "all-srcs",
|
|
srcs = [
|
|
":package-srcs",
|
|
"//cmd/gke-certificates-controller/app:all-srcs",
|
|
],
|
|
tags = ["automanaged"],
|
|
)
|
|
|
|
go_binary(
|
|
name = "gke-certificates-controller",
|
|
library = ":go_default_library",
|
|
tags = ["automanaged"],
|
|
)
|