cri

package
v10.308.2+incompatible Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 15, 2022 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var KubeletProcessRegex = BuildProcessRegex("(hyperkube )?kubelet")

KubeletProcessRegex is the kubelet process regex used to find the kubelet process Sometimes it is not the kubelet binary that is used in the system (e.g. Openshift4) but k8s' all-in-one binary: https://github.com/kubernetes/kubernetes/tree/master/cluster/images/hyperkube The following is an example of a kubelet cmdline in Openshift4: /usr/bin/hyperkube kubelet --config=/etc/kubernetes/kubelet.conf --bootstrap-kubeconfig=/etc/kubernete s/kubeconfig --rotate-certificates --kubeconfig=/var/lib/kubelet/kubeconfig --container-runtime=remote --container-runtime-endpoint=/var/run/crio/crio.s ock --allow-privileged --node-labels=node-role.kubernetes.io/master --minimum-container-ttl-duration=6m0s --client-ca-file=/etc/kubernetes/ca.crt --clou d-provider=aws --anonymous-auth=false --register-with-taints=node-role.kubernetes.io/master=:NoSchedule

Functions

func BuildProcessRegex

func BuildProcessRegex(procExpression string) *regexp.Regexp

BuildProcessRegex returns a regex that should match processes with a name matching the given process regular expression Remark: procExpression can be a regular expression

func CriSocket

func CriSocket() (string, error)

CriSocket returns the CRI socket path used by kubelet

func ParseStringFlag

func ParseStringFlag(cmd string, flagRegexp string) *string

ParseStringFlag parses a flag from a given command

func ParseStringFlags

func ParseStringFlags(cmd string, flagRegexp string) []string

ParseStringFlags parses a list of flags from a given command

Types

type ExtendedRuntimeService

type ExtendedRuntimeService interface {
	criapi.RuntimeService
	ContainerStatusVerbose(containerID string) (*criruntimev1alpha2.ContainerStatus, map[string]string, error)
	PodSandboxStatusVerbose(podSandboxID string) (*criruntimev1alpha2.PodSandboxStatus, map[string]string, error)
	StatusVerbose() (*criruntimev1alpha2.RuntimeStatus, map[string]string, error)
}

ExtendedRuntimeService extends the CRI RuntimeService by some verbose functions that are otherwise inaccessible

func NewCRIExtendedRuntimeServiceWrapper

func NewCRIExtendedRuntimeServiceWrapper(ctx context.Context, timeout time.Duration, client criruntimev1alpha2.RuntimeServiceClient) (ExtendedRuntimeService, error)

NewCRIExtendedRuntimeServiceWrapper creates an ExtendedRuntimeService from a v1alpha2 runtime service client NOTE: the passed context is used for every subsequent call on the interface as the parent context with a timeout as passed through the argument. If the parent context gets canceled, this client becomes useless.

func NewCRIRuntimeServiceClient

func NewCRIRuntimeServiceClient(ctx context.Context, criRuntimeEndpoint string) (ExtendedRuntimeService, error)

NewCRIRuntimeServiceClient takes a CRI socket path and tries to establish a grpc connection to the CRI runtime service. On success it is returning an ExtendedRuntimeService interface which is an extended CRI runtime service interface.

type Type

type Type string

Type is the type to be given at startup

const (
	TypeNone       Type = "none"       // TypeNone is the default enforcer type
	TypeDocker     Type = "docker"     // TypeDocker is enforcerd which uses CRI docker
	TypeCRIO       Type = "crio"       // TypeDaemonset is enforcerd which uses CRIO CRI
	TypeContainerD Type = "containerd" // TypeContainerD is a enforcerd which uses containerD CRI
)

Different enforcer types

func DetectCRIRuntimeEndpoint

func DetectCRIRuntimeEndpoint() (string, Type, error)

DetectCRIRuntimeEndpoint checks if the unix socket path are present for CRI

func (Type) CRIO

func (d Type) CRIO() bool

CRIO returns true if the enforcer is using CRI for container management

func (Type) Container

func (d Type) Container() bool

Container returns true iff the enforcer supports containers

func (Type) ContainerD

func (d Type) ContainerD() bool

ContainerD returns true if enforcerd is using ContainerD CRI

func (Type) Docker

func (d Type) Docker() bool

Docker returns true if the enforcer supports docker

func (Type) SupportRuncProxy

func (d Type) SupportRuncProxy() bool

SupportRuncProxy returns true iff the enforcer supports runc proxy

Directories

Path Synopsis
Package mockcri is a generated GoMock package.
Package mockcri is a generated GoMock package.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL