INNER CODE UNIT · Go

plmStorageSpec

nginx/kubernetes-ingress · cmd/nginx-ingress/main.go:651

func plmStorageSpec() wafbundle.S3ConfigSpec {
	return wafbundle.S3ConfigSpec{
		Endpoint:           *plmStorageURL,
		Credentials:        plmRefs.Credentials,
		CA:                 plmRefs.CA,
		ClientSSL:          plmRefs.ClientSSL,
		InsecureSkipVerify: *plmStorageInsecureSkipVerify,
	}
}

// setupPLMStorage validates the PLM S3 credentials at startup so that
// misconfiguration surfaces immediately. Credentials are re-read on every
// bundle fetch, so rotated Secrets are picked up automatically.
func setupPLMStorage(ctx context.Context, kubeClient kubernetes.Interface, recorder record.EventRecorder, pod *api_v1.Pod) {
	l := nl.LoggerFromContext(ctx)

	spec := plmStorageSpec()
	source := &wafbundle.KubeClientSecretSource{Client: kubeClient}

View source record →