in reconcilers/reconciler.go [201:231]
func createTlsSecret(ctx context.Context, clientset kubernetes.Interface, data goalresolvers.CertificateData) *error {
logger := log.MustGetLogger(ctx)
secret := &corev1.Secret{
TypeMeta: metav1.TypeMeta{
Kind: "Secret",
APIVersion: "v1",
},
ObjectMeta: metav1.ObjectMeta{
Name: utils.SecretName(),
Namespace: config.AppConfig.Namespace,
Labels: map[string]string{
consts.ManagedLabelKey: consts.ManagedLabelValue,
},
},
Data: map[string][]byte{
"caCert.pem": data.CaCertPem,
"caKey.pem": data.CaKeyPem,
"serverCert.pem": data.ServerCertPem,
"serverKey.pem": data.ServerKeyPem,
},
Type: "Opaque",
}
_, createErr := clientset.CoreV1().Secrets(config.AppConfig.Namespace).Create(ctx, secret, metav1.CreateOptions{})
if createErr != nil {
logger.Errorf(ctx, "create secret %s failed. error: %s", utils.SecretName(), createErr)
return &createErr
}
logger.Infof(ctx, "secret %s created.", utils.SecretName())
return nil
}