resources

Documentation

Overview

Package resources contains Kubernetes configs and policies for Constellation.

Index

• Constants
• func GetKonnectivityCertificateRequest() (certificateRequest []byte, privateKey []byte, err error)
• type AuditPolicy
  • func NewDefaultAuditPolicy() *AuditPolicy
  • func (p *AuditPolicy) Marshal() ([]byte, error)
• type EgressSelectorConfiguration
  • func NewEgressSelectorConfiguration() *EgressSelectorConfiguration
  • func (v *EgressSelectorConfiguration) Marshal() ([]byte, error)
• type KonnectivityServerStaticPod
  • func NewKonnectivityServerStaticPod() *KonnectivityServerStaticPod
  • func (v *KonnectivityServerStaticPod) Marshal() ([]byte, error)

Constants

const (
	// KonnectivityCertificateFilename is the path to the kubelets certificate.
	KonnectivityCertificateFilename = "/etc/kubernetes/konnectivity.crt"
	// KonnectivityKeyFilename is the path to the kubelets private key.
	KonnectivityKeyFilename = "/etc/kubernetes/konnectivity.key"
)

Functions

func GetKonnectivityCertificateRequest

func GetKonnectivityCertificateRequest() (certificateRequest []byte, privateKey []byte, err error)

GetKonnectivityCertificateRequest returns a certificate request and matching private key for the konnectivity server.

Types

type AuditPolicy

type AuditPolicy struct {
	Policy auditv1.Policy
}

AuditPolicy defines rulesets for what should be logged in the kube-apiserver audit log. reference: https://kubernetes.io/docs/tasks/debug/debug-cluster/audit/ .

func NewDefaultAuditPolicy

func NewDefaultAuditPolicy() *AuditPolicy

NewDefaultAuditPolicy create a new default Constellation audit policty.

func (*AuditPolicy) Marshal

func (p *AuditPolicy) Marshal() ([]byte, error)

Marshal marshals the audit policy as a YAML document.

type EgressSelectorConfiguration

type EgressSelectorConfiguration struct {
	EgressSelectorConfiguration apiserver.EgressSelectorConfiguration
}

EgressSelectorConfiguration deployment.

func NewEgressSelectorConfiguration

func NewEgressSelectorConfiguration() *EgressSelectorConfiguration

NewEgressSelectorConfiguration creates a new EgressSelectorConfiguration.

func (*EgressSelectorConfiguration) Marshal

func (v *EgressSelectorConfiguration) Marshal() ([]byte, error)

Marshal to Kubernetes YAML.

type KonnectivityServerStaticPod

type KonnectivityServerStaticPod struct {
	StaticPod corev1.Pod
}

KonnectivityServerStaticPod deployment.

func NewKonnectivityServerStaticPod

func NewKonnectivityServerStaticPod() *KonnectivityServerStaticPod

NewKonnectivityServerStaticPod create a new KonnectivityServerStaticPod.

func (*KonnectivityServerStaticPod) Marshal

func (v *KonnectivityServerStaticPod) Marshal() ([]byte, error)

Marshal to Kubernetes YAML.