sgpp

Documentation

Index

• Constants
• func BuildHostVethNamePrefix(hostVethNamePrefix string, podSGEnforcingMode EnforcingMode) string
• type EnforcingMode
  • func LoadEnforcingModeFromEnv() EnforcingMode

Constants

const (
	EnforcingModeStrict               EnforcingMode = "strict"
	EnforcingModeStandard             EnforcingMode = "standard"
	VpcCNINodeEventActionForTrunk     string        = "NeedTrunk"
	TrunkEventNote                    string        = "vpc.amazonaws.com/has-trunk-attached=false"
	VpcCNINodeEventActionForEniConfig string        = "NeedEniConfig"
	VpcCNIEventReason                 string        = "AwsNodeNotificationToRc"
)

Functions

func BuildHostVethNamePrefix

func BuildHostVethNamePrefix(hostVethNamePrefix string, podSGEnforcingMode EnforcingMode) string

BuildHostVethNamePrefix computes the name prefix for host-side veth pairs for SGPP pods for the "standard" mode, we use the same hostVethNamePrefix as normal pods, which is "eni" by default, but can be overwritten as well. for the "strict" mode, we use dedicated "vlan" hostVethNamePrefix, which is to opt-out SNAT support and opt-out calico's workload management.

Types

type EnforcingMode

type EnforcingMode string

const (
	// DefaultEnforcingMode is the default enforcing mode if not specified explicitly.
	DefaultEnforcingMode EnforcingMode = EnforcingModeStrict
)

func LoadEnforcingModeFromEnv

func LoadEnforcingModeFromEnv() EnforcingMode

LoadEnforcingModeFromEnv tries to load the enforcing mode from environment variable and fall-back to DefaultEnforcingMode.