Instrument HTTP handler.

NewController returns the main sealed-secrets controller loop.

NewKeyRegistry creates a new KeyRegistry.

ObserveCondition sets a `condition_info` Gauge according to a SealedSecret status.

ScheduleJobWithTrigger creates a long-running loop that runs a job after an initialDelay and then after each period duration.

UnregisterCondition unregisters Gauges associated to a SealedSecret conditions.

ErrUnsealFailed is used as part of the Event 'reason' when a SealedSecret fails the unsealing process.

ErrUpdateFailed is used as part of the Event 'reason' when a SealedSecret fails to update the target Secret for a non-cryptography reason.

SealedSecretsKeyLabel is that label used to locate active key pairs used to decrypt sealed secrets.

SuccessUnsealed is used as part of the Event 'reason' when a SealedSecret is unsealed successfully.

ErrCast happens when a K8s any type cannot be casted to the expected type.

ErrPrivateKeyNotRSA is returned when the private key is not a valid RSA key.

Controller implements the main sealed-secrets-controller loop.

Flags to configure the controller.

A Key holds the cryptographic key pair and some metadata about it.

A KeyRegistry manages the key pairs used to (un)seal secrets.