func createTlsSecret()

in reconcilers/reconciler.go [201:231]


func createTlsSecret(ctx context.Context, clientset kubernetes.Interface, data goalresolvers.CertificateData) *error {
	logger := log.MustGetLogger(ctx)
	secret := &corev1.Secret{
		TypeMeta: metav1.TypeMeta{
			Kind:       "Secret",
			APIVersion: "v1",
		},
		ObjectMeta: metav1.ObjectMeta{
			Name:      utils.SecretName(),
			Namespace: config.AppConfig.Namespace,
			Labels: map[string]string{
				consts.ManagedLabelKey: consts.ManagedLabelValue,
			},
		},
		Data: map[string][]byte{
			"caCert.pem":     data.CaCertPem,
			"caKey.pem":      data.CaKeyPem,
			"serverCert.pem": data.ServerCertPem,
			"serverKey.pem":  data.ServerKeyPem,
		},
		Type: "Opaque",
	}

	_, createErr := clientset.CoreV1().Secrets(config.AppConfig.Namespace).Create(ctx, secret, metav1.CreateOptions{})
	if createErr != nil {
		logger.Errorf(ctx, "create secret %s failed. error: %s", utils.SecretName(), createErr)
		return &createErr
	}
	logger.Infof(ctx, "secret %s created.", utils.SecretName())
	return nil
}