kubernetes/pkg/controller/bootstrap/bootstrapsigner.go

type SignerOptions …

// DefaultSignerOptions returns a set of default options for creating a Signer.
func DefaultSignerOptions() SignerOptions { … }

type Signer …

// NewSigner returns a new *Signer.
func NewSigner(cl clientset.Interface, secrets informers.SecretInformer, configMaps informers.ConfigMapInformer, options SignerOptions) (*Signer, error) { … }

// Run runs controller loops and returns when they are done
func (e *Signer) Run(ctx context.Context) { … }

func (e *Signer) pokeConfigMapSync() { … }

func (e *Signer) serviceConfigMapQueue(ctx context.Context) { … }

// signConfigMap computes the signatures on our latest cached objects and writes
// back if necessary.
func (e *Signer) signConfigMap(ctx context.Context) { … }

func (e *Signer) updateConfigMap(ctx context.Context, cm *v1.ConfigMap) { … }

// getConfigMap gets the ConfigMap we are interested in
func (e *Signer) getConfigMap() *v1.ConfigMap { … }

func (e *Signer) listSecrets() []*v1.Secret { … }

// getTokens returns a map of tokenID->tokenSecret. It ensures the token is
// valid for signing.
func (e *Signer) getTokens(ctx context.Context) map[string]string { … }