Skip to main content

Module dev_ca

Module dev_ca 

Source
Expand description

Embeds the dev-CA kustomization used to deploy caproni’s development certificate authority and its supporting cert-manager resources (CA Secret, ClusterIssuer, trust Bundle, and a wildcard Certificate for the cluster hostname).

Ported from internal/infra/assets/dev-ca/assets.go and devca_overlay_test.go. The Go original uses //go:embed *.yaml against embed.FS; this port has no directly equivalent virtual filesystem type, so FILES is a const slice of (name, content) pairs built from include_str!, materialized into a xianyun_backends::kustomize::FileSystem by write_files the same way the Go test’s assetstest.WriteFS walks an embed.FS. See PORT_NOTES.md.

The Traefik TLSStore that makes that wildcard certificate Traefik’s default is a separate module, crate::traefik_tlsstore: it needs the Traefik CRDs, which the resources here do not.

Constants§

FILES
Ported from the //go:embed *.yaml directive on devca.FS.

Functions§

write_files
Ported from assetstest.WriteFS, specialized to FILES rather than a generic io/fs.FS, since this port embeds files as a const slice rather than a virtual filesystem type.