key

Documentation

Index

• Constants
• Variables
• func GetLegacyOrganization(getter annotation.AnnotationsGetter) string
• func IsDefaultNamespace(ns string) bool
• func IsOrgNamespace(ns string) bool
• func IsProtectedNamespace(ns string) bool
• func Organization(getter rbacLabel.LabelsGetter) string
• func OrganizationName(ns string) string
• func OrganizationReadClusterNamespaceRoleBindingName(organization string) string
• func OrganizationReadClusterRoleName(ns string) string
• func OrganizationReadDefaultCatalogsRoleBindingName(organization string) string
• func OrganizationReadOrganizationClusterRoleBindingName(organization string) string
• func OrganizationReadReleasesClusterRoleBindingName(organization string) string
• func OrganizationWriteClusterNamespaceRoleBindingName(organization string) string
• func ReadAllAutomationSAClusterRoleBindingName() string
• func ReadAllCustomerGroupClusterRoleBindingName() string
• func WriteAllAutomationSARoleBindingName() string
• func WriteAllCustomerGroupRoleBindingName() string
• func WriteAllGSGroupClusterRoleBindingName() string
• func WriteClientCertsAutomationSARoleBindingName() string
• func WriteFluxResourcesAutomationSARoleBindingName() string
• func WriteOrganizationsAutomationSARoleBindingName() string
• func WriteOrganizationsCustomerGroupClusterRoleBindingName() string
• func WriteSilencesAutomationSARoleBindingName() string
• func WriteSilencesAutomationSAinNSRoleBindingName(namespace string) string

Constants

const (
	AutomationServiceAccountName         = "automation"
	ClusterAdminClusterRoleName          = "cluster-admin"
	DefaultReadAllPermissionsName        = "read-all"
	DefaultWriteAllPermissionsName       = "write-all"
	DefaultNamespaceName                 = "default"
	NameLabel                            = "kubernetes.io/metadata.name"
	FluxCRDRoleBindingName               = "flux-crd-controller"
	FluxNamespaceName                    = "flux-system"
	FluxReconcilerRoleBindingName        = "flux-namespace-reconciler"
	ReadClusterNamespaceAppsRoleBinding  = "read-in-cluster-ns"
	ReadClusterNamespaceAppsRole         = "read-in-cluster-ns"
	ReadDefaultCatalogsRole              = "read-default-catalogs"
	ReadReleasesRole                     = "read-releases"
	UpstreamFluxCRDClusterRole           = "crd-controller"
	WriteClusterNamespaceAppsRoleBinding = "write-in-cluster-ns"
	WriteClusterNamespaceAppsRole        = "write-in-cluster-ns"
	WriteOrganizationsPermissionsName    = "write-organizations"
	WriteFluxResourcesPermissionsName    = "write-flux-resources"
	WriteClientCertsPermissionsName      = "write-client-certificates"
	WriteSilencesPermissionsName         = "write-silences"
)

Variables

var (
	// FluxCrdServiceAccounts Upstream Flux ServiceAccounts which need permissions for
	// "*.toolkit.fluxcd.io" resources in Organization namespace
	// see: https://github.com/fluxcd/flux2/blob/main/manifests/rbac/controller.yaml
	FluxCrdServiceAccounts = []string{
		"helm-controller",
		"image-automation-controller",
		"image-reflector-controller",
		"kustomize-controller",
		"notification-controller",
		"source-controller",
	}
	// FluxReconcilerServiceAccounts Upstream Flux ServiceAccounts which need cluster-admin access to
	// reconcile resources in Organization namespace
	// see: https://github.com/fluxcd/flux2/blob/main/manifests/rbac/reconciler.yaml
	FluxReconcilerServiceAccounts = []string{
		"helm-controller",
		"kustomize-controller",
	}
)

Functions

func GetLegacyOrganization

func GetLegacyOrganization(getter annotation.AnnotationsGetter) string

func IsDefaultNamespace

func IsDefaultNamespace(ns string) bool

func IsOrgNamespace

func IsOrgNamespace(ns string) bool

func IsProtectedNamespace

func IsProtectedNamespace(ns string) bool

func Organization

func Organization(getter rbacLabel.LabelsGetter) string

func OrganizationName

func OrganizationName(ns string) string

func OrganizationReadClusterNamespaceRoleBindingName

func OrganizationReadClusterNamespaceRoleBindingName(organization string) string

func OrganizationReadClusterRoleName

func OrganizationReadClusterRoleName(ns string) string

func OrganizationReadDefaultCatalogsRoleBindingName

func OrganizationReadDefaultCatalogsRoleBindingName(organization string) string

func OrganizationReadOrganizationClusterRoleBindingName

func OrganizationReadOrganizationClusterRoleBindingName(organization string) string

func OrganizationReadReleasesClusterRoleBindingName

func OrganizationReadReleasesClusterRoleBindingName(organization string) string

func OrganizationWriteClusterNamespaceRoleBindingName

func OrganizationWriteClusterNamespaceRoleBindingName(organization string) string

func ReadAllAutomationSAClusterRoleBindingName

func ReadAllAutomationSAClusterRoleBindingName() string

func ReadAllCustomerGroupClusterRoleBindingName

func ReadAllCustomerGroupClusterRoleBindingName() string

func WriteAllAutomationSARoleBindingName

func WriteAllAutomationSARoleBindingName() string

func WriteAllCustomerGroupRoleBindingName

func WriteAllCustomerGroupRoleBindingName() string

func WriteAllGSGroupClusterRoleBindingName

func WriteAllGSGroupClusterRoleBindingName() string

func WriteClientCertsAutomationSARoleBindingName

func WriteClientCertsAutomationSARoleBindingName() string

func WriteFluxResourcesAutomationSARoleBindingName

func WriteFluxResourcesAutomationSARoleBindingName() string

func WriteOrganizationsAutomationSARoleBindingName

func WriteOrganizationsAutomationSARoleBindingName() string

func WriteOrganizationsCustomerGroupClusterRoleBindingName

func WriteOrganizationsCustomerGroupClusterRoleBindingName() string

func WriteSilencesAutomationSARoleBindingName

func WriteSilencesAutomationSARoleBindingName() string

func WriteSilencesAutomationSAinNSRoleBindingName

func WriteSilencesAutomationSAinNSRoleBindingName(namespace string) string