Documentation ¶
Index ¶
- Variables
- type Botanist
- func (b *Botanist) CleanCustomResourceDefinitions() error
- func (b *Botanist) CleanKubernetesResources() error
- func (b *Botanist) CleanWebhooks(ctx context.Context) error
- func (b *Botanist) CleanupCustomAPIServices() error
- func (b *Botanist) DeleteBackupInfrastructure() error
- func (b *Botanist) DeleteBackupNamespace() error
- func (b *Botanist) DeleteCertBroker() error
- func (b *Botanist) DeleteClusterAutoscaler() error
- func (b *Botanist) DeleteGardenSecrets() error
- func (b *Botanist) DeleteKubeAPIServer() error
- func (b *Botanist) DeleteKubeAddonManager() error
- func (b *Botanist) DeleteNamespace() error
- func (b *Botanist) DeleteSeedMonitoring() error
- func (b *Botanist) DeployBackupInfrastructure() error
- func (b *Botanist) DeployBackupNamespace() error
- func (b *Botanist) DeployCertBroker() error
- func (b *Botanist) DeployCloudMetadataServiceNetworkPolicy() error
- func (b *Botanist) DeployCloudProviderSecret() error
- func (b *Botanist) DeployClusterAutoscaler() error
- func (b *Botanist) DeployDNSRecord(terraformerPurpose, name, target string, purposeInternalDomain bool) error
- func (b *Botanist) DeployExternalDomainDNSRecord() error
- func (b *Botanist) DeployInternalDomainDNSRecord() error
- func (b *Botanist) DeployMachineControllerManager() error
- func (b *Botanist) DeployNamespace() error
- func (b *Botanist) DeploySecrets() error
- func (b *Botanist) DeploySeedLogging() error
- func (b *Botanist) DeploySeedMonitoring() error
- func (b *Botanist) DestroyDNSRecord(terraformerPurpose string, purposeInternalDomain bool) error
- func (b *Botanist) DestroyExternalDomainDNSRecord() error
- func (b *Botanist) DestroyIngressDNSRecord() error
- func (b *Botanist) DestroyInternalDomainDNSRecord() error
- func (b *Botanist) EnsureIngressDNSRecord() error
- func (b *Botanist) ForceDeleteCustomAPIServices() error
- func (b *Botanist) ForceDeleteCustomResourceDefinitions() error
- func (b *Botanist) GenerateKubeLegoConfig() (map[string]interface{}, error)
- func (b *Botanist) GenerateKubernetesDashboardConfig() (map[string]interface{}, error)
- func (b *Botanist) GenerateTerraformAlicloudDNSVariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
- func (b *Botanist) GenerateTerraformCloudDNSVariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
- func (b *Botanist) GenerateTerraformDNSConfig(name, hostedZoneID, targetType string, values []string) map[string]interface{}
- func (b *Botanist) GenerateTerraformDesignateDNSVariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
- func (b *Botanist) GenerateTerraformRoute53VariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
- func (b *Botanist) HealthChecks(initializeShootClients func() error, ...) (*gardenv1beta1.Condition, *gardenv1beta1.Condition, *gardenv1beta1.Condition, ...)
- func (b *Botanist) HibernateControlPlane(ctx context.Context) error
- func (b *Botanist) MonitoringHealthChecks(checker *HealthChecker, inactiveAlerts *gardenv1beta1.Condition) *gardenv1beta1.Condition
- func (b *Botanist) PerformGarbageCollectionSeed() error
- func (b *Botanist) PerformGarbageCollectionShoot() error
- func (b *Botanist) RefreshCloudControllerManagerChecksums() error
- func (b *Botanist) RefreshKubeControllerManagerChecksums() error
- func (b *Botanist) RegisterAsSeed(protected, visible *bool, minimumVolumeSize *string) error
- func (b *Botanist) RequiredExtensionsExist(shoot *gardenv1beta1.Shoot) error
- func (b *Botanist) SyncShootCredentialsToGarden() error
- func (b *Botanist) UnregisterAsSeed() error
- func (b *Botanist) WaitForControllersToBeActive() error
- func (b *Botanist) WaitUntilBackupInfrastructureReconciled() error
- func (b *Botanist) WaitUntilBackupNamespaceDeleted() error
- func (b *Botanist) WaitUntilClusterAutoscalerDeleted() error
- func (b *Botanist) WaitUntilEtcdReady() error
- func (b *Botanist) WaitUntilKubeAPIServerReady() error
- func (b *Botanist) WaitUntilKubeAPIServerServiceIsReady() error
- func (b *Botanist) WaitUntilKubeAddonManagerDeleted() error
- func (b *Botanist) WaitUntilNodesDeleted(ctx context.Context) error
- func (b *Botanist) WaitUntilSeedNamespaceDeleted() error
- func (b *Botanist) WaitUntilVPNConnectionExists() error
- func (b *Botanist) WakeUpControlPlane(ctx context.Context) error
- type HealthChecker
- func (b *HealthChecker) CheckClusterNodes(namespace string, condition *gardenv1beta1.Condition, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) CheckControlPlane(shoot *gardenv1beta1.Shoot, namespace string, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) CheckLoggingControlPlane(namespace string, condition *gardenv1beta1.Condition, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) CheckMonitoringControlPlane(namespace string, wantsAlertmanager bool, condition *gardenv1beta1.Condition, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) CheckMonitoringSystemComponents(namespace string, condition *gardenv1beta1.Condition, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) CheckOptionalAddonsSystemComponents(namespace string, condition *gardenv1beta1.Condition, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) CheckSystemComponents(namespace string, condition *gardenv1beta1.Condition, ...) (*gardenv1beta1.Condition, error)
- func (b *HealthChecker) FailedCondition(condition *gardenv1beta1.Condition, reason, message string) *gardenv1beta1.Condition
Constants ¶
This section is empty.
Variables ¶
var Now = time.Now
Now determines the current time.
Functions ¶
This section is empty.
Types ¶
type Botanist ¶
Botanist is a struct which has methods that perform cloud-independent operations for a Shoot cluster.
func New ¶
New takes an operation object <o> and creates a new Botanist object. It checks whether the given Shoot DNS domain is covered by a default domain, and if so, it sets the <DefaultDomainSecret> attribute on the Botanist object.
func (*Botanist) CleanCustomResourceDefinitions ¶
CleanCustomResourceDefinitions deletes all the CRDs in the Kubernetes cluster (which will delete the existing custom resources, recursively). It will wait until all resources have been cleaned up.
func (*Botanist) CleanKubernetesResources ¶
CleanKubernetesResources deletes all the Kubernetes resources in the Shoot cluster other than those stored in the exceptions map. It will check whether all the Kubernetes resources in the Shoot cluster other than those stored in the exceptions map have been deleted. It will return an error in case it has not finished yet, and nil if all resources are gone.
func (*Botanist) CleanWebhooks ¶
CleanWebhooks deletes all Webhooks in the Shoot cluster that are not being managed by the addon manager.
func (*Botanist) CleanupCustomAPIServices ¶
CleanupCustomAPIServices deletes all the custom API services in the Kubernetes cluster. It will wait until all resources have been cleaned up.
func (*Botanist) DeleteBackupInfrastructure ¶
DeleteBackupInfrastructure deletes the sets deletionTimestamp on the backupInfrastructure resource in the Garden namespace which is responsible for actual deletion of cloud resource for Shoot's backup infrastructure.
func (*Botanist) DeleteBackupNamespace ¶
DeleteBackupNamespace deletes the namespace in the Seed cluster which holds the backup infrastructure state. The built-in garbage collection in Kubernetes will automatically delete all resources which belong to this namespace.
func (*Botanist) DeleteCertBroker ¶
DeleteCertBroker delete the Cert-Broker deployment if cert-management in disabled.
func (*Botanist) DeleteClusterAutoscaler ¶
DeleteClusterAutoscaler deletes the cluster-autoscaler deployment in the Seed cluster which holds the Shoot's control plane.
func (*Botanist) DeleteGardenSecrets ¶
DeleteGardenSecrets deletes the Shoot-specific secrets from the project namespace in the Garden cluster. TODO: https://github.com/gardener/gardener/pull/353: This can be removed in a future version as we are now using owner references for the Garden secrets (also remove the actual invocation of the function in the deletion flow of a Shoot).
func (*Botanist) DeleteKubeAPIServer ¶
DeleteKubeAPIServer deletes the kube-apiserver deployment in the Seed cluster which holds the Shoot's control plane.
func (*Botanist) DeleteKubeAddonManager ¶
DeleteKubeAddonManager deletes the kube-addon-manager deployment in the Seed cluster which holds the Shoot's control plane. It needs to be deleted before trying to remove any resources in the Shoot cluster, otherwise it will automatically recreate them and block the infrastructure deletion.
func (*Botanist) DeleteNamespace ¶
DeleteNamespace deletes the namespace in the Seed cluster which holds the control plane components. The built-in garbage collection in Kubernetes will automatically delete all resources which belong to this namespace. This comprises volumes and load balancers as well.
func (*Botanist) DeleteSeedMonitoring ¶
DeleteSeedMonitoring will delete the monitoring stack from the Seed cluster to avoid phantom alerts during the deletion process. More precisely, the Alertmanager and Prometheus StatefulSets will be deleted.
func (*Botanist) DeployBackupInfrastructure ¶
DeployBackupInfrastructure creates a BackupInfrastructure resource into the project namespace of shoot on garden cluster. BackupInfrastructure controller acting on resource will actually create required cloud resources and updates the status.
func (*Botanist) DeployBackupNamespace ¶
DeployBackupNamespace creates a namespace in the Seed cluster from info in shoot object, which is used to deploy all the backup infrastructure realted resources for shoot cluster. Moreover, the terraform configuration and all the secrets will be stored as ConfigMaps/Secrets.
func (*Botanist) DeployCertBroker ¶
DeployCertBroker deploys the Cert-Broker to the Shoot namespace in the Seed.
func (*Botanist) DeployCloudMetadataServiceNetworkPolicy ¶
DeployCloudMetadataServiceNetworkPolicy creates a global network policy that allows access to the meta-data service only from the cloud-controller-manager and the kube-controller-manager
func (*Botanist) DeployCloudProviderSecret ¶
DeployCloudProviderSecret creates or updates the cloud provider secret in the Shoot namespace in the Seed cluster.
func (*Botanist) DeployClusterAutoscaler ¶
DeployClusterAutoscaler deploys the cluster-autoscaler into the Shoot namespace in the Seed cluster. It is responsible for automatically scaling the worker pools of the Shoot.
func (*Botanist) DeployDNSRecord ¶
func (b *Botanist) DeployDNSRecord(terraformerPurpose, name, target string, purposeInternalDomain bool) error
DeployDNSRecord kicks off a Terraform job of name <alias> which deploys the DNS record for <name> which will point to <target>.
func (*Botanist) DeployExternalDomainDNSRecord ¶
DeployExternalDomainDNSRecord deploys the DNS record for the external cluster domain.
func (*Botanist) DeployInternalDomainDNSRecord ¶
DeployInternalDomainDNSRecord deploys the DNS record for the internal cluster domain.
func (*Botanist) DeployMachineControllerManager ¶
DeployMachineControllerManager deploys the machine-controller-manager into the Shoot namespace in the Seed cluster. It is responsible for managing the worker nodes of the Shoot.
func (*Botanist) DeployNamespace ¶
DeployNamespace creates a namespace in the Seed cluster which is used to deploy all the control plane components for the Shoot cluster. Moreover, the cloud provider configuration and all the secrets will be stored as ConfigMaps/Secrets.
func (*Botanist) DeploySecrets ¶
DeploySecrets creates a CA certificate for the Shoot cluster and uses it to sign the server certificate used by the kube-apiserver, and all client certificates used for communcation. It also creates RSA key pairs for SSH connections to the nodes/VMs and for the VPN tunnel. Moreover, basic authentication credentials are computed which will be used to secure the Ingress resources and the kube-apiserver itself. Server certificates for the exposed monitoring endpoints (via Ingress) are generated as well.
func (*Botanist) DeploySeedLogging ¶
DeploySeedLogging will install the Helm release "seed-bootstrap/charts/elastic-kibana-curator" in the Seed clusters.
func (*Botanist) DeploySeedMonitoring ¶
DeploySeedMonitoring will install the Helm release "seed-monitoring" in the Seed clusters. It comprises components to monitor the Shoot cluster whose control plane runs in the Seed cluster.
func (*Botanist) DestroyDNSRecord ¶
DestroyDNSRecord kicks off a Terraform job which destroys the DNS record.
func (*Botanist) DestroyExternalDomainDNSRecord ¶
DestroyExternalDomainDNSRecord destroys the DNS record for the external cluster domain.
func (*Botanist) DestroyIngressDNSRecord ¶
DestroyIngressDNSRecord destroys the nginx-ingress resources created by Terraform.
func (*Botanist) DestroyInternalDomainDNSRecord ¶
DestroyInternalDomainDNSRecord destroys the DNS record for the internal cluster domain.
func (*Botanist) EnsureIngressDNSRecord ¶
EnsureIngressDNSRecord creates the respective wildcard DNS record for the nginx-ingress-controller.
func (*Botanist) ForceDeleteCustomAPIServices ¶
ForceDeleteCustomAPIServices forcefully deletes all custom API services, accumulating all errors in the process.
func (*Botanist) ForceDeleteCustomResourceDefinitions ¶
ForceDeleteCustomResourceDefinitions forcefully deletes all custom CRDs, accumulating all errors in the process.
func (*Botanist) GenerateKubeLegoConfig ¶
GenerateKubeLegoConfig generates the values which are required to render the chart of kube-lego properly.
func (*Botanist) GenerateKubernetesDashboardConfig ¶
GenerateKubernetesDashboardConfig generates the values which are required to render the chart of the kubernetes-dashboard properly.
func (*Botanist) GenerateTerraformAlicloudDNSVariablesEnvironment ¶
func (b *Botanist) GenerateTerraformAlicloudDNSVariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
GenerateTerraformAlicloudDNSVariablesEnvironment generates the environment containing the credentials which are required to validate/apply/destroy the Terraform configuration. These environment must contain Terraform variables which are prefixed with TF_VAR_.
func (*Botanist) GenerateTerraformCloudDNSVariablesEnvironment ¶
func (b *Botanist) GenerateTerraformCloudDNSVariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
GenerateTerraformCloudDNSVariablesEnvironment generates the environment containing the credentials which Terraform variables which are prefixed with TF_VAR_.
func (*Botanist) GenerateTerraformDNSConfig ¶
func (b *Botanist) GenerateTerraformDNSConfig(name, hostedZoneID, targetType string, values []string) map[string]interface{}
GenerateTerraformDNSConfig creates the Terraform variables and the Terraform config (for the DNS record) and returns them (these values will be stored as a ConfigMap and a Secret in the Garden cluster.
func (*Botanist) GenerateTerraformDesignateDNSVariablesEnvironment ¶
func (b *Botanist) GenerateTerraformDesignateDNSVariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
GenerateTerraformDesignateDNSVariablesEnvironment generates the environment containing the credentials which are required to validate/apply/destroy the Terraform configuration. These environment must contain Terraform variables which are prefixed with TF_VAR_.
func (*Botanist) GenerateTerraformRoute53VariablesEnvironment ¶
func (b *Botanist) GenerateTerraformRoute53VariablesEnvironment(purposeInternalDomain bool) (map[string]string, error)
GenerateTerraformRoute53VariablesEnvironment generates the environment containing the credentials which are required to validate/apply/destroy the Terraform configuration. These environment must contain Terraform variables which are prefixed with TF_VAR_.
func (*Botanist) HealthChecks ¶
func (b *Botanist) HealthChecks(initializeShootClients func() error, thresholdMappings map[gardenv1beta1.ConditionType]time.Duration, apiserverAvailability, controlPlane, nodes, systemComponents *gardenv1beta1.Condition) (*gardenv1beta1.Condition, *gardenv1beta1.Condition, *gardenv1beta1.Condition, *gardenv1beta1.Condition)
HealthChecks conducts the health checks on all the given conditions.
func (*Botanist) HibernateControlPlane ¶
HibernateControlPlane hibernates the entire control plane if the shoot shall be hibernated.
func (*Botanist) MonitoringHealthChecks ¶
func (b *Botanist) MonitoringHealthChecks(checker *HealthChecker, inactiveAlerts *gardenv1beta1.Condition) *gardenv1beta1.Condition
MonitoringHealthChecks performs the monitoring related health checks.
func (*Botanist) PerformGarbageCollectionSeed ¶
PerformGarbageCollectionSeed performs garbage collection in the Shoot namespace in the Seed cluster, i.e., it deletes old machine sets which have a desired=actual=0 replica count.
func (*Botanist) PerformGarbageCollectionShoot ¶
PerformGarbageCollectionShoot performs garbage collection in the kube-system namespace in the Shoot cluster, i.e., it deletes evicted pods (mitigation for https://github.com/kubernetes/kubernetes/issues/55051).
func (*Botanist) RefreshCloudControllerManagerChecksums ¶
RefreshCloudControllerManagerChecksums updates the cloud provider checksum in the cloud-controller-manager pod spec template.
func (*Botanist) RefreshKubeControllerManagerChecksums ¶
RefreshKubeControllerManagerChecksums updates the cloud provider checksum in the kube-controller-manager pod spec template.
func (*Botanist) RegisterAsSeed ¶
RegisterAsSeed registers a Shoot cluster as a Seed in the Garden cluster.
func (*Botanist) RequiredExtensionsExist ¶
func (b *Botanist) RequiredExtensionsExist(shoot *gardenv1beta1.Shoot) error
RequiredExtensionsExist checks whether all required extensions needed for an shoot operation exist.
func (*Botanist) SyncShootCredentialsToGarden ¶
SyncShootCredentialsToGarden copies the kubeconfig generated for the user as well as the SSH keypair to the project namespace in the Garden cluster.
func (*Botanist) UnregisterAsSeed ¶
UnregisterAsSeed unregisters a Shoot cluster as a Seed in the Garden cluster.
func (*Botanist) WaitForControllersToBeActive ¶
WaitForControllersToBeActive checks whether the kube-controller-manager and the cloud-controller-manager have recently written to the Endpoint object holding the leader information. If yes, they are active.
func (*Botanist) WaitUntilBackupInfrastructureReconciled ¶
WaitUntilBackupInfrastructureReconciled waits until the backup infrastructure within the garden cluster has been reconciled.
func (*Botanist) WaitUntilBackupNamespaceDeleted ¶
WaitUntilBackupNamespaceDeleted waits until the namespace for the backup of Shoot cluster within the Seed cluster is deleted.
func (*Botanist) WaitUntilClusterAutoscalerDeleted ¶
WaitUntilClusterAutoscalerDeleted waits until the cluster-autoscaler deployment within the Seed cluster has been deleted.
func (*Botanist) WaitUntilEtcdReady ¶
WaitUntilEtcdReady waits until the etcd statefulsets indicate readiness in their statuses.
func (*Botanist) WaitUntilKubeAPIServerReady ¶
WaitUntilKubeAPIServerReady waits until the kube-apiserver pod(s) indicate readiness in their statuses.
func (*Botanist) WaitUntilKubeAPIServerServiceIsReady ¶
WaitUntilKubeAPIServerServiceIsReady waits until the external load balancer of the kube-apiserver has been created (i.e., its ingress information has been updated in the service status).
func (*Botanist) WaitUntilKubeAddonManagerDeleted ¶
WaitUntilKubeAddonManagerDeleted waits until the kube-addon-manager deployment within the Seed cluster has been deleted.
func (*Botanist) WaitUntilNodesDeleted ¶
WaitUntilNodesDeleted waits until no nodes exist in the shoot cluster anymore.
func (*Botanist) WaitUntilSeedNamespaceDeleted ¶
WaitUntilSeedNamespaceDeleted waits until the namespace of the Shoot cluster within the Seed cluster is deleted.
func (*Botanist) WaitUntilVPNConnectionExists ¶
WaitUntilVPNConnectionExists waits until a port forward connection to the vpn-shoot pod in the kube-system namespace of the Shoot cluster can be established.
func (*Botanist) WakeUpControlPlane ¶
WakeUpControlPlane scales the replicas to 1 for the following deployments which are needed in case of shoot deletion: * etcd-events * etcd-main * kube-apiserver * cloud-controller-manager * kube-controller-manager * machine-controller-manager
type HealthChecker ¶
type HealthChecker struct {
// contains filtered or unexported fields
}
HealthChecker contains the condition thresholds.
func NewHealthChecker ¶
func NewHealthChecker(conditionThresholds map[gardenv1beta1.ConditionType]time.Duration) *HealthChecker
NewHealthChecker creates a new health checker.
func (*HealthChecker) CheckClusterNodes ¶
func (b *HealthChecker) CheckClusterNodes( namespace string, condition *gardenv1beta1.Condition, nodeLister kutil.NodeLister, machineDeploymentLister kutil.MachineDeploymentLister, ) (*gardenv1beta1.Condition, error)
CheckClusterNodes checks whether cluster nodes in the given listers are complete and healthy.
func (*HealthChecker) CheckControlPlane ¶
func (b *HealthChecker) CheckControlPlane( shoot *gardenv1beta1.Shoot, namespace string, seedCloudProvider gardenv1beta1.CloudProvider, condition *gardenv1beta1.Condition, deploymentLister kutil.DeploymentLister, statefulSetLister kutil.StatefulSetLister, machineDeploymentLister kutil.MachineDeploymentLister, ) (*gardenv1beta1.Condition, error)
CheckControlPlane checks whether the control plane components in the given listers are complete and healthy.
func (*HealthChecker) CheckLoggingControlPlane ¶
func (b *HealthChecker) CheckLoggingControlPlane( namespace string, condition *gardenv1beta1.Condition, deploymentLister kutil.DeploymentLister, statefulSetLister kutil.StatefulSetLister, ) (*gardenv1beta1.Condition, error)
CheckLoggingControlPlane checks whether the logging components in the given listers are complete and healthy.
func (*HealthChecker) CheckMonitoringControlPlane ¶
func (b *HealthChecker) CheckMonitoringControlPlane( namespace string, wantsAlertmanager bool, condition *gardenv1beta1.Condition, deploymentLister kutil.DeploymentLister, statefulSetLister kutil.StatefulSetLister, ) (*gardenv1beta1.Condition, error)
CheckMonitoringControlPlane checks whether the monitoring in the given listers are complete and healthy.
func (*HealthChecker) CheckMonitoringSystemComponents ¶
func (b *HealthChecker) CheckMonitoringSystemComponents( namespace string, condition *gardenv1beta1.Condition, daemonSetLister kutil.DaemonSetLister, ) (*gardenv1beta1.Condition, error)
CheckMonitoringSystemComponents checks whether the monitoring in the given listers are complete and healthy.
func (*HealthChecker) CheckOptionalAddonsSystemComponents ¶
func (b *HealthChecker) CheckOptionalAddonsSystemComponents( namespace string, condition *gardenv1beta1.Condition, deploymentLister kutil.DeploymentLister, daemonSetLister kutil.DaemonSetLister, ) (*gardenv1beta1.Condition, error)
CheckOptionalAddonsSystemComponents checks whether the addons in the given listers are healthy.
func (*HealthChecker) CheckSystemComponents ¶
func (b *HealthChecker) CheckSystemComponents( namespace string, condition *gardenv1beta1.Condition, deploymentLister kutil.DeploymentLister, daemonSetLister kutil.DaemonSetLister, ) (*gardenv1beta1.Condition, error)
CheckSystemComponents checks whether the system components in the given listers are complete and healthy.
func (*HealthChecker) FailedCondition ¶
func (b *HealthChecker) FailedCondition(condition *gardenv1beta1.Condition, reason, message string) *gardenv1beta1.Condition
FailedCondition returns a progressing or false condition depending on the progressing threshold.