kubernetes/pkg/controller/certificates/approver/sarapprove.go

type csrRecognizer …

type sarApprover …

// NewCSRApprovingController creates a new CSRApprovingController.
func NewCSRApprovingController(ctx context.Context, client clientset.Interface, csrInformer certificatesinformers.CertificateSigningRequestInformer) *certificates.CertificateController { … }

func recognizers() []csrRecognizer { … }

func (a *sarApprover) handle(ctx context.Context, csr *capi.CertificateSigningRequest) error { … }

func (a *sarApprover) authorize(ctx context.Context, csr *capi.CertificateSigningRequest, rattrs authorization.ResourceAttributes) (bool, error) { … }

func appendApprovalCondition(csr *capi.CertificateSigningRequest, message string) { … }

func isNodeClientCert(csr *capi.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool { … }

func isSelfNodeClientCert(csr *capi.CertificateSigningRequest, x509cr *x509.CertificateRequest) bool { … }

func usagesToSet(usages []capi.KeyUsage) sets.String { … }