controller

Documentation

Index

• type MCSAllocationFunc
  • func DefaultMCSAllocation(from *uid.Range, to *mcs.Range, blockSize int) MCSAllocationFunc
• type NamespaceSecurityDefaultsController
  • func NewNamespaceSecurityDefaultsController(namespaces informers.NamespaceInformer, client kcoreclient.NamespaceInterface, ...) *NamespaceSecurityDefaultsController
  • func (c *NamespaceSecurityDefaultsController) Run(stopCh <-chan struct{}, workers int)
• type Repair
  • func NewRepair(interval time.Duration, client kcoreclient.NamespaceInterface, ...) *Repair
  • func (c *Repair) RunOnce() error
  • func (c *Repair) RunUntil(ch chan struct{})

Types

type MCSAllocationFunc

type MCSAllocationFunc func(uid.Block) *mcs.Label

func DefaultMCSAllocation

func DefaultMCSAllocation(from *uid.Range, to *mcs.Range, blockSize int) MCSAllocationFunc

DefaultMCSAllocation returns a label from the MCS range that matches the offset within the overall range. blockSize must be a positive integer representing the number of labels to jump past in the category space (if 1, range == label, if 2 each range will have two labels).

type NamespaceSecurityDefaultsController

type NamespaceSecurityDefaultsController struct {
	// contains filtered or unexported fields
}

NamespaceSecurityDefaultsController allocates uids/labels for namespaces

func NewNamespaceSecurityDefaultsController

func NewNamespaceSecurityDefaultsController(namespaces informers.NamespaceInformer, client kcoreclient.NamespaceInterface, uid uidallocator.Interface, mcs MCSAllocationFunc) *NamespaceSecurityDefaultsController

func (*NamespaceSecurityDefaultsController) Run

func (c *NamespaceSecurityDefaultsController) Run(stopCh <-chan struct{}, workers int)

Run starts the workers for this controller.

type Repair

type Repair struct {
	// contains filtered or unexported fields
}

Repair is a controller loop that periodically examines all UID allocations and logs any errors, and then sets the compacted and accurate list of both

Can be run at infrequent intervals, and is best performed on startup of the master. Is level driven and idempotent - all claimed UIDs will be updated into the allocator map at the end of a single execution loop if no race is encountered.

func NewRepair

func NewRepair(interval time.Duration, client kcoreclient.NamespaceInterface, uidRange *uid.Range, alloc rangeallocation.RangeRegistry) *Repair

NewRepair creates a controller that periodically ensures that all UIDs labels that are allocated in the cluster are claimed.

func (*Repair) RunOnce

func (c *Repair) RunOnce() error

RunOnce verifies the state of allocations and returns an error if an unrecoverable problem occurs.

func (*Repair) RunUntil

func (c *Repair) RunUntil(ch chan struct{})

RunUntil starts the controller until the provided ch is closed.