networkpolicy

Documentation

Index

• Constants
• type Reconciler
  • func (r *Reconciler) AddToManager(mgr manager.Manager, runtimeCluster cluster.Cluster) error
  • func (r *Reconciler) IsKubernetesEndpoint() predicate.Predicate
  • func (r *Reconciler) MapObjectToName(_ context.Context, _ logr.Logger, _ client.Reader, obj client.Object) []reconcile.Request
  • func (r *Reconciler) MapObjectToNamespace(_ context.Context, _ logr.Logger, _ client.Reader, obj client.Object) []reconcile.Request
  • func (r *Reconciler) MapToNamespaces(ctx context.Context, log logr.Logger, _ client.Reader, _ client.Object) []reconcile.Request
  • func (r *Reconciler) NetworkPolicyPredicate() predicate.Predicate
  • func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)
• type RuntimeNetworkConfig

Constants

const ControllerName = "networkpolicy"

ControllerName is the name of this controller.

Types

type Reconciler

type Reconciler struct {
	RuntimeClient                client.Client
	ConcurrentSyncs              *int
	WatchRegisterers             []func(controller.Controller) error
	Resolver                     hostnameresolver.HostResolver
	ResolverUpdate               <-chan event.GenericEvent
	RuntimeNetworks              RuntimeNetworkConfig
	AdditionalNamespaceSelectors []metav1.LabelSelector
	// contains filtered or unexported fields
}

Reconciler implements the reconcile.Reconcile interface for namespace reconciliation.

func (*Reconciler) AddToManager

func (r *Reconciler) AddToManager(mgr manager.Manager, runtimeCluster cluster.Cluster) error

AddToManager adds Reconciler to the given manager.

func (*Reconciler) IsKubernetesEndpoint

func (r *Reconciler) IsKubernetesEndpoint() predicate.Predicate

IsKubernetesEndpoint returns a predicate which evaluates if the object is the kubernetes endpoint.

func (*Reconciler) MapObjectToName

func (r *Reconciler) MapObjectToName(_ context.Context, _ logr.Logger, _ client.Reader, obj client.Object) []reconcile.Request

MapObjectToName is a mapper function which maps an object to its name.

func (*Reconciler) MapObjectToNamespace

func (r *Reconciler) MapObjectToNamespace(_ context.Context, _ logr.Logger, _ client.Reader, obj client.Object) []reconcile.Request

MapObjectToNamespace is a mapper function which maps an object to its namespace.

func (*Reconciler) MapToNamespaces

func (r *Reconciler) MapToNamespaces(ctx context.Context, log logr.Logger, _ client.Reader, _ client.Object) []reconcile.Request

MapToNamespaces is a mapper function which returns requests for all relevant namespaces.

func (*Reconciler) NetworkPolicyPredicate

func (r *Reconciler) NetworkPolicyPredicate() predicate.Predicate

NetworkPolicyPredicate is a predicate which returns true in case the network policy name matches with one of those managed by this reconciler.

func (*Reconciler) Reconcile

func (r *Reconciler) Reconcile(ctx context.Context, request reconcile.Request) (reconcile.Result, error)

Reconcile reconciles namespace in order to create some central network policies.

type RuntimeNetworkConfig

type RuntimeNetworkConfig struct {
	// Nodes is the CIDR of the node network.
	Nodes *string
	// Pods is the CIDR of the pod network.
	Pods string
	// Services is the CIDR of the service network.
	Services string
	// BlockCIDRs is a list of network addresses that should be blocked.
	BlockCIDRs []string
}

RuntimeNetworkConfig is the configuration of the networks for the runtime cluster.