app

Documentation

Index

• func NewAdmissionCommand() *cobra.Command
• type Options
  • func (o *Options) AddFlags(fs *pflag.FlagSet)
  • func (o *Options) Run(ctx context.Context) error

Functions

func NewAdmissionCommand

func NewAdmissionCommand() *cobra.Command

NewAdmissionCommand creates a new *cobra.Command able to run lakom admission controller.

Types

type Options

type Options struct {
	// BindAddress is the address the HTTP server should bind to.
	BindAddress string
	// Port is the port that should be opened by the HTTP server.
	Port int
	// ServerCertDir is the path to server TLS cert and key.
	ServerCertDir string
	// MetricsBindAddress is the TCP address that the controller should bind to
	// for serving prometheus metrics.
	// It can be set to "0" to disable the metrics serving.
	MetricsBindAddress string
	// HealthBindAddress is the TCP address that the controller should bind to for serving health probes.
	HealthBindAddress string
	// EnableProfiling enables profiling via web interface host:port/debug/pprof/.
	EnableProfiling bool
	// EnableContentionProfiling enables lock contention profiling, if
	// enableProfiling is true.
	EnableContentionProfiling bool
	// LakomConfigPath is path to file with lakom configuration containing cosign public keys used to verify the image signatures.
	LakomConfigPath string
	// CacheTTL is the duration the objects are kept in the cache.
	CacheTTL time.Duration
	// CacheRefreshInterval is the duration between cache evaluations if a given object needs to dropped from the cache or not.
	CacheRefreshInterval time.Duration
	// UseOnlyImagePullSecrets sets only the image pull secrets of the pod to be used to access the OCI registry.
	// Otherwise, also the node identity and docker config file are used.
	UseOnlyImagePullSecrets bool
	// AllowUntrustedImages configures the webhook to allow images without trusted signature.
	// Instead to deny the request, the webhook will allow it with a warning.
	AllowUntrustedImages bool
	// AllowInsecureRegistries configures the webhook to fallback to HTTP if HTTPS communication with
	// the respective registry is not possible.
	AllowInsecureRegistries bool
}

Options has all the context and parameters needed to run lakom admission controller.

func (*Options) AddFlags

func (o *Options) AddFlags(fs *pflag.FlagSet)

AddFlags adds lakom admission controller's flags to the specified FlagSet.

func (*Options) Run

func (o *Options) Run(ctx context.Context) error

Run runs lakom admission controller using the specified options.