bastion

Documentation

Index

• Variables
• func AddToManager(_ context.Context, mgr manager.Manager) error
• func AddToManagerWithOptions(mgr manager.Manager, opts AddOptions) error
• func EgressAllowSSHToWorker(opt *Options, secGroupID string, remoteGroupID string) rules.CreateOpts
• func GetIPs(s *servers.Server, opt *Options) (string, string, error)
• func IngressAllowSSH(opt *Options, etherType rules.RuleEtherType, ...) rules.CreateOpts
• func IngressReady(ingress *corev1.LoadBalancerIngress) bool
• type AddOptions
• type IngressPermission
• type Options
  • func DetermineOptions(bastion *extensionsv1alpha1.Bastion, cluster *controller.Cluster) (*Options, error)

Variables

var (
	// DefaultAddOptions are the default AddOptions for AddToManager.
	DefaultAddOptions = AddOptions{}
)

Functions

func AddToManager

func AddToManager(_ context.Context, mgr manager.Manager) error

AddToManager adds a controller with the default Options.

func AddToManagerWithOptions

func AddToManagerWithOptions(mgr manager.Manager, opts AddOptions) error

AddToManagerWithOptions adds a controller with the given Options to the given manager. The opts.Reconciler is being set with a newly instantiated actuator.

func EgressAllowSSHToWorker

func EgressAllowSSHToWorker(opt *Options, secGroupID string, remoteGroupID string) rules.CreateOpts

EgressAllowSSHToWorker egress allow ssh to worker

func GetIPs

func GetIPs(s *servers.Server, opt *Options) (string, string, error)

GetIPs return privateip, publicip

func IngressAllowSSH

func IngressAllowSSH(opt *Options, etherType rules.RuleEtherType, secGroupID, cidr, remoteGroupID string) rules.CreateOpts

IngressAllowSSH ingress allow ssh

func IngressReady

func IngressReady(ingress *corev1.LoadBalancerIngress) bool

IngressReady returns true if either an IP or a hostname or both are set.

Types

type AddOptions

type AddOptions struct {
	// Controller are the controller.Options.
	Controller controller.Options
	// IgnoreOperationAnnotation specifies whether to ignore the operation annotation or not.
	IgnoreOperationAnnotation bool
	// BastionConfig contains config for the Bastion config.
	// Deprecated: Configuring the bastion will be done via CloudProfile in future
	BastionConfig controllerconfig.BastionConfig
	// ExtensionClass defines the extension class this extension is responsible for.
	ExtensionClass extensionsv1alpha1.ExtensionClass
}

AddOptions are Options to apply when adding the Openstack bastion controller to the manager.

type IngressPermission

type IngressPermission struct {
	// EtherType describes the rules.RuleEtherType of the CIDR.
	EtherType rules.RuleEtherType

	// CIDR holds the IPv4 or IPv6 range, depending on EtherType.
	CIDR string
}

IngressPermission hold the IPv4 and IPv6 ranges that should be allowed to access the bastion.

type Options

type Options struct {
	BastionInstanceName string
	Region              string
	ShootName           string
	SecretReference     corev1.SecretReference
	SecurityGroup       string
	UserData            []byte
	// contains filtered or unexported fields
}

Options contains provider-related information required for setting up a bastion instance. This struct combines precomputed values like the bastion instance name with the IDs of pre-existing cloud provider resources, like the nic name, subnet name etc.

func DetermineOptions

func DetermineOptions(bastion *extensionsv1alpha1.Bastion, cluster *controller.Cluster) (*Options, error)

DetermineOptions determines the required information that are required to reconcile a Bastion on Openstack. This function does not create any IaaS resources.