Documentation ¶
Overview ¶
Package kubeletdnat contains the kubeletdnat controller which:
- Is needed for all controlplane components running in the seed that need to reach nodes
- Is not needed if reaching the pods is sufficient
- Must be used in conjunction with the openvpn client
- Creates NAT rules for both the public and private node IP that tunnels access to them via the VPN
- Its counterpart runs within the openvpn client pod in the usercluster, is part of the openvpn addon and written in bash
Index ¶
Constants ¶
View Source
const (
ControllerName = "kubermatic_kubelet_dnat_controller"
)
Variables ¶
This section is empty.
Functions ¶
Types ¶
type Reconciler ¶
type Reconciler struct { ctrlruntimeclient.Client // contains filtered or unexported fields }
Reconciler updates iptable rules to match node addresses. Every node address gets a translation to the respective node-access (vpn) address.
Click to show internal directories.
Click to hide internal directories.