controller

Documentation

Index

• Constants
• func LegacyPullSecretsPresent(pullBindings msiacrpullv1beta1.AcrPullBindingList, secrets corev1.SecretList) bool
• type AcrPullBindingReconciler
  • func NewV1beta1Reconciler(opts *V1beta1ReconcilerOpts) *AcrPullBindingReconciler
  • func (r AcrPullBindingReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *AcrPullBindingReconciler) SetupWithManager(ctx context.Context, mgr ctrl.Manager) error
• type CoreOpts
• type LegacyTokenCleanupController
  • func (c *LegacyTokenCleanupController) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (c *LegacyTokenCleanupController) SetupWithManager(_ context.Context, mgr ctrl.Manager) error
• type PullBindingReconciler
  • func NewV1beta2Reconciler(opts *V1beta2ReconcilerOpts) *PullBindingReconciler
  • func (r PullBindingReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)
  • func (r *PullBindingReconciler) SetupWithManager(ctx context.Context, mgr ctrl.Manager) error
• type ServiceAccountTokenMinter
• type V1beta1ReconcilerOpts
• type V1beta2ReconcilerOpts

Constants

const (
	// ACRPullBindingLabel is a label on Secrets that holds the name of the ACRPullBinding for which the Secret holds a pull credential
	ACRPullBindingLabel = "acr.microsoft.com/binding"
)

Functions

func LegacyPullSecretsPresent

func LegacyPullSecretsPresent(pullBindings msiacrpullv1beta1.AcrPullBindingList, secrets corev1.SecretList) bool

LegacyPullSecretsPresent determines if any legacy pull secrets still exist on the cluster.

Types

type AcrPullBindingReconciler

type AcrPullBindingReconciler struct {
	// contains filtered or unexported fields
}

AcrPullBindingReconciler reconciles a AcrPullBinding object

func NewV1beta1Reconciler

func NewV1beta1Reconciler(opts *V1beta1ReconcilerOpts) *AcrPullBindingReconciler

func (AcrPullBindingReconciler) Reconcile

func (r AcrPullBindingReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

func (*AcrPullBindingReconciler) SetupWithManager

func (r *AcrPullBindingReconciler) SetupWithManager(ctx context.Context, mgr ctrl.Manager) error

type CoreOpts

type CoreOpts struct {
	Client crclient.Client
	Logger logr.Logger
	Scheme *runtime.Scheme
	// contains filtered or unexported fields
}

type LegacyTokenCleanupController

type LegacyTokenCleanupController struct {
	Client client.Client
	Log    logr.Logger
}

func (*LegacyTokenCleanupController) Reconcile

func (c *LegacyTokenCleanupController) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

Reconcile cleans up legacy ACR pull token secrets and references to them from the cluster if new tokens have been generated.

func (*LegacyTokenCleanupController) SetupWithManager

func (c *LegacyTokenCleanupController) SetupWithManager(_ context.Context, mgr ctrl.Manager) error

type PullBindingReconciler

type PullBindingReconciler struct {
	// contains filtered or unexported fields
}

PullBindingReconciler reconciles AcrPullBindings

func NewV1beta2Reconciler

func NewV1beta2Reconciler(opts *V1beta2ReconcilerOpts) *PullBindingReconciler

func (PullBindingReconciler) Reconcile

func (r PullBindingReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

func (*PullBindingReconciler) SetupWithManager

func (r *PullBindingReconciler) SetupWithManager(ctx context.Context, mgr ctrl.Manager) error

type ServiceAccountTokenMinter

type ServiceAccountTokenMinter func(ctx context.Context, serviceAccountNamespace, serviceAccountName string) (*authenticationv1.TokenRequest, error)

type V1beta1ReconcilerOpts

type V1beta1ReconcilerOpts struct {
	CoreOpts

	Auth                             authorizer.Interface
	DefaultManagedIdentityResourceID string
	DefaultManagedIdentityClientID   string
	DefaultACRServer                 string
}

V1beta1ReconcilerOpts configures the inputs for reconciling v1beta2 pull bindings

type V1beta2ReconcilerOpts

type V1beta2ReconcilerOpts struct {
	CoreOpts

	TTLRotationFraction         float64
	ServiceAccountClient        corev1client.ServiceAccountsGetter
	ServiceAccountTokenAudience string
	// contains filtered or unexported fields
}

V1beta2ReconcilerOpts configures the inputs for reconciling v1beta2 pull bindings