identitycachecell

Documentation

Index

• Variables
• type CachingIdentityAllocator

Variables

var Cell = cell.Module(
	"identity",
	"Allocating and managing security identities",

	metrics.Metric(newIdentityCacheMetrics),

	cell.Provide(newIdentityAllocator),
	cell.Config(defaultConfig),
)

Cell provides the IdentityAllocator for allocating security identities

Types

type CachingIdentityAllocator

type CachingIdentityAllocator interface {
	cache.IdentityAllocator
	clustermesh.RemoteIdentityWatcher

	InitIdentityAllocator(versioned.Interface) <-chan struct{}

	// RestoreLocalIdentities reads in the checkpointed local allocator state
	// from disk and allocates a reference to every previously existing identity.
	//
	// Once all identity-allocating objects are synchronized (e.g. network policies,
	// remote nodes), call ReleaseRestoredIdentities to release the held references.
	RestoreLocalIdentities() (map[identity.NumericIdentity]*identity.Identity, error)

	// ReleaseRestoredIdentities releases any identities that were restored, reducing their reference
	// count and cleaning up as necessary.
	ReleaseRestoredIdentities()

	Close()
}

CachingIdentityAllocator provides an abstraction over the concrete type in pkg/identity/cache so that the underlying implementation can be mocked out in unit tests.