conf

Documentation

Index

• Constants
• func GetPendingPolicyGroup(configs map[string]string) string
• type AdmissionControllerConf
  • func NewAdmissionControllerConf(configMaps []*v1.ConfigMap) *AdmissionControllerConf
  • func (acc *AdmissionControllerConf) DumpConfiguration()
  • func (acc *AdmissionControllerConf) GetAmServiceName() string
  • func (acc *AdmissionControllerConf) GetBypassAuth() bool
  • func (acc *AdmissionControllerConf) GetBypassNamespaces() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetConfigMaps() []*v1.ConfigMap
  • func (acc *AdmissionControllerConf) GetEnableConfigHotRefresh() bool
  • func (acc *AdmissionControllerConf) GetExternalGroups() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetExternalUsers() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetGenerateUniqueAppIds() bool
  • func (acc *AdmissionControllerConf) GetKubeConfig() string
  • func (acc *AdmissionControllerConf) GetLabelNamespaces() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetNamespace() string
  • func (acc *AdmissionControllerConf) GetNoLabelNamespaces() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetPolicyGroup() string
  • func (acc *AdmissionControllerConf) GetProcessNamespaces() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetSchedulerServiceAddress() string
  • func (acc *AdmissionControllerConf) GetSystemUsers() []*regexp.Regexp
  • func (acc *AdmissionControllerConf) GetTrustControllers() bool
  • func (acc *AdmissionControllerConf) RegisterHandlers(configMaps informersv1.ConfigMapInformer)

Constants

const (
	AdmissionControllerPrefix = "admissionController."
	WebHookPrefix             = AdmissionControllerPrefix + "webHook."
	FilteringPrefix           = AdmissionControllerPrefix + "filtering."
	AccessControlPrefix       = AdmissionControllerPrefix + "accessControl."

	// webhook configuration
	AMWebHookAMServiceName           = WebHookPrefix + "amServiceName"
	AMWebHookSchedulerServiceAddress = WebHookPrefix + "schedulerServiceAddress"

	// filtering configuration
	AMFilteringProcessNamespaces    = FilteringPrefix + "processNamespaces"
	AMFilteringBypassNamespaces     = FilteringPrefix + "bypassNamespaces"
	AMFilteringLabelNamespaces      = FilteringPrefix + "labelNamespaces"
	AMFilteringNoLabelNamespaces    = FilteringPrefix + "noLabelNamespaces"
	AMFilteringGenerateUniqueAppIds = FilteringPrefix + "generateUniqueAppId"

	// access control configuration
	AMAccessControlBypassAuth       = AccessControlPrefix + "bypassAuth"
	AMAccessControlTrustControllers = AccessControlPrefix + "trustControllers"
	AMAccessControlSystemUsers      = AccessControlPrefix + "systemUsers"
	AMAccessControlExternalUsers    = AccessControlPrefix + "externalUsers"
	AMAccessControlExternalGroups   = AccessControlPrefix + "externalGroups"
)

const (
	// webhook defaults
	DefaultWebHookAmServiceName           = "yunikorn-admission-controller-service"
	DefaultWebHookSchedulerServiceAddress = "yunikorn-service:9080"

	// filtering defaults
	DefaultFilteringProcessNamespaces    = ""
	DefaultFilteringBypassNamespaces     = "^kube-system$"
	DefaultFilteringLabelNamespaces      = ""
	DefaultFilteringNoLabelNamespaces    = ""
	DefaultFilteringGenerateUniqueAppIds = false

	// access control defaults
	DefaultAccessControlBypassAuth       = false
	DefaultAccessControlTrustControllers = true
	DefaultAccessControlSystemUsers      = "^system:serviceaccount:kube-system:"
	DefaultAccessControlExternalUsers    = ""
	DefaultAccessControlExternalGroups   = ""
)

Functions

func GetPendingPolicyGroup

func GetPendingPolicyGroup(configs map[string]string) string

Types

type AdmissionControllerConf

type AdmissionControllerConf struct {
	// contains filtered or unexported fields
}

func NewAdmissionControllerConf

func NewAdmissionControllerConf(configMaps []*v1.ConfigMap) *AdmissionControllerConf

func (*AdmissionControllerConf) DumpConfiguration

func (acc *AdmissionControllerConf) DumpConfiguration()

func (*AdmissionControllerConf) GetAmServiceName

func (acc *AdmissionControllerConf) GetAmServiceName() string

func (*AdmissionControllerConf) GetBypassAuth

func (acc *AdmissionControllerConf) GetBypassAuth() bool

func (*AdmissionControllerConf) GetBypassNamespaces

func (acc *AdmissionControllerConf) GetBypassNamespaces() []*regexp.Regexp

func (*AdmissionControllerConf) GetConfigMaps

func (acc *AdmissionControllerConf) GetConfigMaps() []*v1.ConfigMap

func (*AdmissionControllerConf) GetEnableConfigHotRefresh

func (acc *AdmissionControllerConf) GetEnableConfigHotRefresh() bool

func (*AdmissionControllerConf) GetExternalGroups

func (acc *AdmissionControllerConf) GetExternalGroups() []*regexp.Regexp

func (*AdmissionControllerConf) GetExternalUsers

func (acc *AdmissionControllerConf) GetExternalUsers() []*regexp.Regexp

func (*AdmissionControllerConf) GetGenerateUniqueAppIds

func (acc *AdmissionControllerConf) GetGenerateUniqueAppIds() bool

func (*AdmissionControllerConf) GetKubeConfig

func (acc *AdmissionControllerConf) GetKubeConfig() string

func (*AdmissionControllerConf) GetLabelNamespaces

func (acc *AdmissionControllerConf) GetLabelNamespaces() []*regexp.Regexp

func (*AdmissionControllerConf) GetNamespace

func (acc *AdmissionControllerConf) GetNamespace() string

func (*AdmissionControllerConf) GetNoLabelNamespaces

func (acc *AdmissionControllerConf) GetNoLabelNamespaces() []*regexp.Regexp

func (*AdmissionControllerConf) GetPolicyGroup

func (acc *AdmissionControllerConf) GetPolicyGroup() string

func (*AdmissionControllerConf) GetProcessNamespaces

func (acc *AdmissionControllerConf) GetProcessNamespaces() []*regexp.Regexp

func (*AdmissionControllerConf) GetSchedulerServiceAddress

func (acc *AdmissionControllerConf) GetSchedulerServiceAddress() string

func (*AdmissionControllerConf) GetSystemUsers

func (acc *AdmissionControllerConf) GetSystemUsers() []*regexp.Regexp

func (*AdmissionControllerConf) GetTrustControllers

func (acc *AdmissionControllerConf) GetTrustControllers() bool

func (*AdmissionControllerConf) RegisterHandlers

func (acc *AdmissionControllerConf) RegisterHandlers(configMaps informersv1.ConfigMapInformer)