Function getOrCreateTrustedCAConfigMap

controllers/object_controls.go:1176–1217

getOrCreateTrustedCAConfigMap creates or returns an existing Trusted CA Bundle ConfigMap.

(n ClusterPolicyController, name string)

// getOrCreateTrustedCAConfigMap creates or returns an existing Trusted CA Bundle ConfigMap.
func getOrCreateTrustedCAConfigMap(n ClusterPolicyController, name string) (*corev1.ConfigMap, error) {
	ctx := n.ctx
	configMap := &corev1.ConfigMap{
		TypeMeta: metav1.TypeMeta{
			Kind:       "ConfigMap",
			APIVersion: corev1.SchemeGroupVersion.String(),
		},
		ObjectMeta: metav1.ObjectMeta{
			Name:      name,
			Namespace: n.operatorNamespace,
		},
		Data: map[string]string{
			TrustedCABundleFileName: "",
		},
	}

	// apply label "config.openshift.io/inject-trusted-cabundle: true", so that cert is automatically filled/updated.
	configMap.Labels = make(map[string]string)
	configMap.Labels["config.openshift.io/inject-trusted-cabundle"] = "true"

	logger := n.logger.WithValues("ConfigMap", configMap.Name, "Namespace", configMap.Namespace)

	if err := controllerutil.SetControllerReference(n.singleton, configMap, n.scheme); err != nil {
		return nil, err
	}

	found := &corev1.ConfigMap{}
	err := n.client.Get(ctx, types.NamespacedName{Namespace: configMap.Namespace, Name: configMap.Name}, found)
	if err != nil && apierrors.IsNotFound(err) {
		logger.Info("Not found, creating")
		err = n.client.Create(ctx, configMap)
		if err != nil {
			logger.Info("Couldn't create")
			return nil, fmt.Errorf("failed to create trusted CA bundle config map %q: %s", name, err)
		}
		return configMap, nil
	} else if err != nil {
		return nil, fmt.Errorf("failed to get trusted CA bundle config map %q: %s", name, err)
	}

	return found, nil
}

// get proxy env variables from cluster wide proxy in OCP
func getProxyEnv(proxyConfig *apiconfigv1.Proxy) []corev1.EnvVar {