GO-2024-3063: RBAC Roles for `etcd` created by Kamaji are not disjunct in github.com/clastix/kamaji

konnectivity

package

v1.0.0 Latest Latest Go to latest Published: Jun 28, 2024 License: Apache-2.0 Imports: 24 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/clastix/kamaji

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const (
	AgentName      = "konnectivity-agent"
	CertCommonName = "system:konnectivity-server"
	AgentNamespace = core.NamespaceSystem
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Agent ¶

type Agent struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*Agent) CleanUp ¶

func (r *Agent) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*Agent) CreateOrUpdate ¶

func (r *Agent) CreateOrUpdate(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*Agent) Define ¶

func (r *Agent) Define(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (err error)

func (*Agent) GetName ¶

func (r *Agent) GetName() string

func (*Agent) ShouldCleanup ¶

func (r *Agent) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*Agent) ShouldStatusBeUpdated ¶

func (r *Agent) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*Agent) UpdateTenantControlPlaneStatus ¶

func (r *Agent) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type CertificateResource ¶

type CertificateResource struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*CertificateResource) CleanUp ¶

func (r *CertificateResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*CertificateResource) CreateOrUpdate ¶

func (r *CertificateResource) CreateOrUpdate(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*CertificateResource) Define ¶

func (r *CertificateResource) Define(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

func (*CertificateResource) GetName ¶

func (r *CertificateResource) GetName() string

func (*CertificateResource) ShouldCleanup ¶

func (r *CertificateResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*CertificateResource) ShouldStatusBeUpdated ¶

func (r *CertificateResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*CertificateResource) UpdateTenantControlPlaneStatus ¶

func (r *CertificateResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type ClusterRoleBindingResource ¶

type ClusterRoleBindingResource struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*ClusterRoleBindingResource) CleanUp ¶

func (r *ClusterRoleBindingResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*ClusterRoleBindingResource) CreateOrUpdate ¶

func (r *ClusterRoleBindingResource) CreateOrUpdate(ctx context.Context, tcp *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*ClusterRoleBindingResource) Define ¶

func (r *ClusterRoleBindingResource) Define(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (err error)

func (*ClusterRoleBindingResource) GetName ¶

func (r *ClusterRoleBindingResource) GetName() string

func (*ClusterRoleBindingResource) ShouldCleanup ¶

func (r *ClusterRoleBindingResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*ClusterRoleBindingResource) ShouldStatusBeUpdated ¶

func (r *ClusterRoleBindingResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*ClusterRoleBindingResource) UpdateTenantControlPlaneStatus ¶

func (r *ClusterRoleBindingResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type EgressSelectorConfigurationResource ¶

type EgressSelectorConfigurationResource struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*EgressSelectorConfigurationResource) CleanUp ¶

func (r *EgressSelectorConfigurationResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*EgressSelectorConfigurationResource) CreateOrUpdate ¶

func (r *EgressSelectorConfigurationResource) CreateOrUpdate(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*EgressSelectorConfigurationResource) Define ¶

func (r *EgressSelectorConfigurationResource) Define(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

func (*EgressSelectorConfigurationResource) GetName ¶

func (r *EgressSelectorConfigurationResource) GetName() string

func (*EgressSelectorConfigurationResource) ShouldCleanup ¶

func (r *EgressSelectorConfigurationResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*EgressSelectorConfigurationResource) ShouldStatusBeUpdated ¶

func (r *EgressSelectorConfigurationResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*EgressSelectorConfigurationResource) UpdateTenantControlPlaneStatus ¶

func (r *EgressSelectorConfigurationResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type KubeconfigResource ¶

type KubeconfigResource struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*KubeconfigResource) CleanUp ¶

func (r *KubeconfigResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*KubeconfigResource) CreateOrUpdate ¶

func (r *KubeconfigResource) CreateOrUpdate(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*KubeconfigResource) Define ¶

func (r *KubeconfigResource) Define(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

func (*KubeconfigResource) GetName ¶

func (r *KubeconfigResource) GetName() string

func (*KubeconfigResource) ShouldCleanup ¶

func (r *KubeconfigResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*KubeconfigResource) ShouldStatusBeUpdated ¶

func (r *KubeconfigResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*KubeconfigResource) UpdateTenantControlPlaneStatus ¶

func (r *KubeconfigResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type KubernetesDeploymentResource ¶

type KubernetesDeploymentResource struct {
	Builder builder.Konnectivity
	Client  client.Client
	// contains filtered or unexported fields
}

func (*KubernetesDeploymentResource) CleanUp ¶

func (r *KubernetesDeploymentResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*KubernetesDeploymentResource) CreateOrUpdate ¶

func (r *KubernetesDeploymentResource) CreateOrUpdate(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*KubernetesDeploymentResource) Define ¶

func (r *KubernetesDeploymentResource) Define(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

func (*KubernetesDeploymentResource) GetName ¶

func (r *KubernetesDeploymentResource) GetName() string

func (*KubernetesDeploymentResource) ShouldCleanup ¶

func (r *KubernetesDeploymentResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*KubernetesDeploymentResource) ShouldStatusBeUpdated ¶

func (r *KubernetesDeploymentResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*KubernetesDeploymentResource) UpdateTenantControlPlaneStatus ¶

func (r *KubernetesDeploymentResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type ServiceAccountResource ¶

type ServiceAccountResource struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*ServiceAccountResource) CleanUp ¶

func (r *ServiceAccountResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*ServiceAccountResource) CreateOrUpdate ¶

func (r *ServiceAccountResource) CreateOrUpdate(ctx context.Context, tcp *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*ServiceAccountResource) Define ¶

func (r *ServiceAccountResource) Define(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (err error)

func (*ServiceAccountResource) GetName ¶

func (r *ServiceAccountResource) GetName() string

func (*ServiceAccountResource) ShouldCleanup ¶

func (r *ServiceAccountResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*ServiceAccountResource) ShouldStatusBeUpdated ¶

func (r *ServiceAccountResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*ServiceAccountResource) UpdateTenantControlPlaneStatus ¶

func (r *ServiceAccountResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

type ServiceResource ¶

type ServiceResource struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*ServiceResource) CleanUp ¶

func (r *ServiceResource) CleanUp(ctx context.Context, _ *kamajiv1alpha1.TenantControlPlane) (bool, error)

func (*ServiceResource) CreateOrUpdate ¶

func (r *ServiceResource) CreateOrUpdate(ctx context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) (controllerutil.OperationResult, error)

func (*ServiceResource) Define ¶

func (r *ServiceResource) Define(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

func (*ServiceResource) GetName ¶

func (r *ServiceResource) GetName() string

func (*ServiceResource) ShouldCleanup ¶

func (r *ServiceResource) ShouldCleanup(tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*ServiceResource) ShouldStatusBeUpdated ¶

func (r *ServiceResource) ShouldStatusBeUpdated(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) bool

func (*ServiceResource) UpdateTenantControlPlaneStatus ¶

func (r *ServiceResource) UpdateTenantControlPlaneStatus(_ context.Context, tenantControlPlane *kamajiv1alpha1.TenantControlPlane) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL