constants

Documentation

Index

• Constants
• Variables

Constants

const (
	// ExtensionType is the name of the extension type.
	ExtensionType = "shoot-falco-service"

	// ServiceName is the name of the service.
	ServiceName                  = ExtensionType
	ExtensionServiceName         = "extension-" + ServiceName
	GardenerExtensionServiceName = "gardener-" + ExtensionServiceName

	// ManagedResourceNamesControllerSeed is the name used to describe the managed seed resources for the controller.
	ManagedResourceNameFalco = ExtensionServiceName + "-shoot"

	ManagedResourceNameFalcoSeed = ExtensionServiceName + "-seed"

	// Name of the chart deployed in control plane (seed)
	ManagedResourceNameFalcoChartSeed = ExtensionServiceName + "-chart-seed"

	// Name of the Falco certificate secret file in shoot namespace
	FalcoCertificatesSecretName = GardenerExtensionServiceName + "-certificates"

	// NamespaceKubeSystem kube-system namespace
	NamespaceKubeSystem = "kube-system"

	// FalcoChartname is the name of the Falco Helm chart to be deployed in shoot clusters
	FalcoChartname = "falco"

	FalcoServerCaKey  = "server-ca.key"
	FalcoServerCaCert = "server-ca.cert"
	FalcoClientCaKey  = "client-ca.key"
	FalcoClientCaCert = "client-ca.crt"

	FalcoServerKey  = "server.key"
	FalcoServerCert = "server.crt"
	FalcoClientKey  = "client.key"
	FalcoClientCert = "client.crt"

	DefaultCALifetime   = time.Hour * 24 * 365 * 2
	DefaultCARenewAfter = DefaultCALifetime - 60

	DefaultCertificateLifetime   = time.Hour * 24 * 180
	DefaultCertificateRenewAfter = DefaultCertificateLifetime - 30

	DefaultTokenLifetime = time.Hour * 24 * 7

	FalcoRules           = "falco_rules.yaml"
	FalcoIncubatingRules = "falco-incubating_rules.yaml"
	FalcoSandboxRules    = "falco-sandbox_rules.yaml"

	ProjectEnableAnnotation = "falco.gardener.cloud/enabled"
)

Variables

var (
	AlwaysEnabledProjects = [...]string{"garden"}
)