consts

Documentation

Overview

Copyright (c) Microsoft Corporation. Licensed under the MIT license.

Index

• Constants

Constants

const (
	// StaticGatewayConfiguration finalizer name
	SGCFinalizerName = "static-gateway-configuration-controller.microsoft.com"

	// GatewayLBConfiguration finalizer name
	LBConfigFinalizerName = "gateway-lb-configuration-controller.microsoft.com"

	// GatewayVMConfiguration finalizer name
	VMConfigFinalizerName = "gateway-vm-configuration-controller.microsoft.com"

	// Default gateway LoadBalancer name
	DefaultGatewayLBName = "kubeegressgateway-ilb"

	// Prefix for managed Azure resources (public IPPrefix, VMSS ipConfig, etc)
	ManagedResourcePrefix = "egressgateway-"

	// Key name in the wireugard private key secret
	WireguardPrivateKeyName = "PrivateKey"

	// Key name in the wireugard private key secret
	WireguardPublicKeyName = "PublicKey"

	// Wireguard listening port range start, inclusive
	WireguardPortStart int32 = 6000

	// Wireguard listening port range end, exclusive
	WireguardPortEnd int32 = 7000

	// Gateway lb health probe path
	GatewayHealthProbeEndpoint = "/gw/"

	// nodepool name tag key in aks clusters
	AKSNodepoolTagKey = "aks-managed-poolName"

	// nodepool name label key in aks clusters
	AKSNodepoolNameLabel = "kubernetes.azure.com/agentpool"

	// nodepool mode label key in aks clusters
	AKSNodepoolModeLabel = "kubernetes.azure.com/mode"

	// nodepool mode label value for upstream usage
	UpstreamNodepoolModeLabel = "kubeegressgateway.azure.com/mode"

	// nodepool mode label value in aks clusters
	AKSNodepoolModeValue = "gateway"

	// gateway nodepool ip prefix size tag key in aks clusters
	AKSNodepoolIPPrefixSizeTagKey = "aks-managed-gatewayIPPrefixSize"

	// Owning StaticGatewayConfiguration namespace key on secret label
	OwningSGCNamespaceLabel = "egressgateway.kubernetes.azure.com/owning-gateway-config-namespace"

	// Owning StaticGatewayConfiguration name key on secret label
	OwningSGCNameLabel = "egressgateway.kubernetes.azure.com/owning-gateway-config-name"

	// Default user agent for Azure SDK
	DefaultUserAgent = "kube-egress-gateway-controller"
)

const (
	// gateway network namespace name
	GatewayNetnsName = "ns-static-egress-gateway"

	// wireguard link name in gateway namespace
	WireguardLinkName = "wg0"

	// wireguard link name prefix in gateway namespace
	WiregaurdLinkNamePrefix = "wg-"

	// host veth pair link name in host namespace
	HostVethLinkName = "host-gateway"

	// host link name in gateway namespace
	HostLinkName = "host0"

	// gateway IP
	GatewayIP = "fe80::1/64"

	// post routing chain name
	PostRoutingChain = "POSTROUTING"

	// pre routing chain name
	PreRoutingChain = "PREROUTING"

	// output chain name
	OutputChain = "OUTPUT"

	// nat table name
	NatTable = "nat"

	// mangle table name
	MangleTable = "mangle"

	// environment variable name for pod namespace
	PodNamespaceEnvKey = "MY_POD_NAMESPACE"

	// environment variable name for nodeName
	NodeNameEnvKey = "MY_NODE_NAME"

	// mark for traffic from eth0 in pod namespace - 0x2222
	Eth0Mark int = 8738

	// ilb ip address label
	ILBIPLabel = "eth0:egress"
)

const (
	CNIConfDir = "/etc/cni/net.d"

	CNIGatewayAnnotationKey = "kubernetes.azure.com/static-gateway-configuration"

	// this taint is applied to AKS nodes when cniManager is not ready
	CNIManagerNotReadyTaintKey = "egressgateway.kubernetes.azure.com/cni-not-ready"
)

const (
	KubeEgressCNIName     = "kube-egress-cni"
	KubeEgressIPAMCNIName = "kube-egress-cni-ipam"
)

const (
	// RateLimitQPSDefault is the default value of the rate limit qps
	RateLimitQPSDefault = 1.0
	// RateLimitBucketDefault is the default value of rate limit bucket
	RateLimitBucketDefault = 5
)