resources

package
v1.3.3-0...-f31c912 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jan 9, 2024 License: AGPL-3.0 Imports: 24 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	ConditionReasonFailedToDecode         = "FailedToDecode"
	ConditionReasonOriginLabelNotMatching = "OriginLabelNotMatching"
	ConditionReasonOriginLabelMatching    = "OriginLabelMatching"
	ConditionReasonNewResource            = "NewResource"
	ConditionReasonNoError                = "NoError"
	ConditionReasonTeleportError          = "TeleportError"
	ConditionReasonTeleportClientError    = "TeleportClientError"
	ConditionTypeTeleportResourceOwned    = "TeleportResourceOwned"
	ConditionTypeSuccessfullyReconciled   = "SuccessfullyReconciled"
	ConditionTypeValidStructure           = "ValidStructure"
	ConditionTypeTeleportClient           = "TeleportClient"
)
View Source 
const DeletionFinalizer = "resources.teleport.dev/deletion"

DeletionFinalizer is a name of finalizer added to resource's 'finalizers' field for tracking deletion events.

Variables

View Source 
var TeleportRoleGVKV5 = schema.GroupVersionKind{
	Group:   v5.GroupVersion.Group,
	Version: v5.GroupVersion.Version,
	Kind:    teleportRoleKind,
}

Functions

func GetUnstructuredObjectFromGVK 

func GetUnstructuredObjectFromGVK(gvk schema.GroupVersionKind) *unstructured.Unstructured

Types

type DeleteExternal 

type DeleteExternal func(context.Context, kclient.Object) error

type ResourceBaseReconciler 

type ResourceBaseReconciler struct {
	kclient.Client
	DeleteExternal DeleteExternal
	UpsertExternal UpsertExternal
}

func (ResourceBaseReconciler) Do 

func (r ResourceBaseReconciler) Do(ctx context.Context, req ctrl.Request, obj kclient.Object) (ctrl.Result, error)

Do will receive an update request and reconcile the resource.

When an event arrives we must propagate that change into the Teleport cluster. We have two types of events: update/create and delete.

For creating/updating we check if the resource exists in Teleport - if it does, we update it - otherwise we create it Always using the state of the resource in the cluster as the source of truth.

For deleting, the recommendation is to use finalizers. Finalizers allow us to map an external resource to a kubernetes resource. So, when we create or update a resource, we add our own finalizer to the kubernetes resource list of finalizers.

For a delete event which has our finalizer: the resource is deleted in Teleport. If it doesn't have the finalizer, we do nothing.

----

Every time we update a resource in Kubernetes (adding finalizers or the OriginLabel), we end the reconciliation process. Afterwards, we receive the request again and we progress to the next step. This allow us to progress with smaller changes and avoid a long-running reconciliation.

type RoleReconciler 

type RoleReconciler struct {
	kclient.Client
	Scheme         *runtime.Scheme
	TeleportClient *client.Client
}

RoleReconciler reconciles a TeleportRole object

func (*RoleReconciler) AddTeleportResourceOrigin 

func (r *RoleReconciler) AddTeleportResourceOrigin(resource types.Role)

func (*RoleReconciler) Delete 

func (r *RoleReconciler) Delete(ctx context.Context, obj kclient.Object) error

func (*RoleReconciler) Reconcile 

func (r *RoleReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

Reconcile is part of the main kubernetes reconciliation loop which aims to move the current state of the cluster closer to the desired state.

For more details, check Reconcile and its Result here: - https://pkg.go.dev/sigs.k8s.io/controller-runtime@v0.11.0/pkg/reconcile

func (*RoleReconciler) SetupWithManager 

func (r *RoleReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager sets up the controller with the Manager.

func (*RoleReconciler) Upsert 

func (r *RoleReconciler) Upsert(ctx context.Context, obj kclient.Object) error

type TeleportExistingResourceMutator 

type TeleportExistingResourceMutator[T TeleportResource] interface {
	MutateExisting(new, existing T)
}

TeleportExistingResourceMutator can be implemented by TeleportResourceClients to edit a resource before its update based on the existing one.

type TeleportKubernetesResource 

type TeleportKubernetesResource[T TeleportResource] interface {
	kclient.Object
	ToTeleport() T
	StatusConditions() *[]v1.Condition
}

TeleportKubernetesResource is a Kubernetes resource representing a Teleport resource

type TeleportResource 

type TeleportResource interface {
	GetName() string
	SetOrigin(string)
	GetMetadata() types.Metadata
	GetRevision() string
	SetRevision(string)
}

type TeleportResourceClient 

type TeleportResourceClient[T TeleportResource] interface {
	Get(context.Context, string) (T, error)
	Create(context.Context, T) error
	Update(context.Context, T) error
	Delete(context.Context, string) error
}

TeleportResourceClient is a CRUD client for a specific Teleport resource. Implementing this interface allows to be reconciled by the TeleportResourceReconciler instead of writing a new specific reconciliation loop. TeleportResourceClient implementations can optionally implement TeleportResourceMutator

type TeleportResourceMutator 

type TeleportResourceMutator[T TeleportResource] interface {
	Mutate(new T)
}

TeleportResourceMutator can be implemented by TeleportResourceClients to edit a resource before its creation/update.

type TeleportResourceReconciler 

type TeleportResourceReconciler[T TeleportResource, K TeleportKubernetesResource[T]] struct {
	ResourceBaseReconciler
	// contains filtered or unexported fields
}

TeleportResourceReconciler is a Teleport generic reconciler. It reconciles TeleportKubernetesResource with Teleport's types.ResourceWithOrigin

func NewAccessListReconciler 

func NewAccessListReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[*accesslist.AccessList, *resourcesv1.TeleportAccessList]

NewAccessListReconciler instantiates a new Kubernetes controller reconciling access_list resources

func NewGithubConnectorReconciler 

func NewGithubConnectorReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[types.GithubConnector, *resourcesv3.TeleportGithubConnector]

NewGithubConnectorReconciler instantiates a new Kubernetes controller reconciling github_connector resources

func NewLoginRuleReconciler 

func NewLoginRuleReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[*resourcesv1.LoginRuleResource, *resourcesv1.TeleportLoginRule]

NewLoginRuleReconciler instantiates a new Kubernetes controller reconciling login_rule resources

func NewOIDCConnectorReconciler 

func NewOIDCConnectorReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[types.OIDCConnector, *resourcesv3.TeleportOIDCConnector]

NewOIDCConnectorReconciler instantiates a new Kubernetes controller reconciling oidc_connector resources

func NewOktaImportRuleReconciler 

func NewOktaImportRuleReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[types.OktaImportRule, *resourcesv1.TeleportOktaImportRule]

NewOktaImportRuleReconciler instantiates a new Kubernetes controller reconciling okta_import_rule resources

func NewProvisionTokenReconciler 

func NewProvisionTokenReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[types.ProvisionToken, *resourcesv2.TeleportProvisionToken]

NewProvisionTokenReconciler instantiates a new Kubernetes controller reconciling provision token resources

func NewSAMLConnectorReconciler 

func NewSAMLConnectorReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[types.SAMLConnector, *resourcesv2.TeleportSAMLConnector]

NewSAMLConnectorReconciler instantiates a new Kubernetes controller reconciling saml_connector resources

func NewTeleportResourceReconciler 

func NewTeleportResourceReconciler[T TeleportResource, K TeleportKubernetesResource[T]](
	client kclient.Client,
	resourceClient TeleportResourceClient[T],
) *TeleportResourceReconciler[T, K]

NewTeleportResourceReconciler instanciates a TeleportResourceReconciler from a TeleportResourceClient.

func NewUserReconciler 

func NewUserReconciler(client kclient.Client, tClient *client.Client) *TeleportResourceReconciler[types.User, *resourcesv2.TeleportUser]

NewUserReconciler instantiates a new Kubernetes controller reconciling user resources

func (TeleportResourceReconciler[T, K]) Delete 

func (r TeleportResourceReconciler[T, K]) Delete(ctx context.Context, obj kclient.Object) error

Delete is the TeleportResourceReconciler of the ResourceBaseReconciler DeleteExertal

func (TeleportResourceReconciler[T, K]) Reconcile 

func (r TeleportResourceReconciler[T, K]) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

Reconcile allows the TeleportResourceReconciler to implement the reconcile.Reconciler interface

func (TeleportResourceReconciler[T, K]) SetupWithManager 

func (r TeleportResourceReconciler[T, K]) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager have a controllerruntime.Manager run the TeleportResourceReconciler

func (TeleportResourceReconciler[T, K]) Upsert 

func (r TeleportResourceReconciler[T, K]) Upsert(ctx context.Context, obj kclient.Object) error

Upsert is the TeleportResourceReconciler of the ResourceBaseReconciler UpsertExertal It contains the logic to check if the resource already exists, if it is owned by the operator and what to do to reconcile the Teleport resource based on the Kubernetes one.

type UpsertExternal 

type UpsertExternal func(context.Context, kclient.Object) error

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.