kubernetes

Documentation

Index

• Constants
• Variables
• type KubeSecretReader
  • func (ksr *KubeSecretReader) Get(secretName string, client *kubernetes.Clientset) (string, error)
• type Kubernetes
  • func NewKubernetes() (*Kubernetes, error)
  • func (k *Kubernetes) CA() ([]byte, error)
  • func (k *Kubernetes) Endpoint() (string, error)
  • func (k *Kubernetes) GetSecret(secret string) (string, error)
  • func (k *Kubernetes) Name() (string, error)
  • func (k *Kubernetes) Namespace() (string, error)
  • func (k *Kubernetes) SaToken() (string, error)
  • func (k *Kubernetes) UpdateRoles(roles []api.Role) error
• type RoleBinding
• type SecretReader
  • func NewSecretReader(namespace string) SecretReader

Constants

const (
	NamespaceFilePath = "/var/run/secrets/kubernetes.io/serviceaccount/namespace"
	CaFilePath        = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
	SaFilePath        = "/var/run/secrets/infra-engine-anonymous/token"
)

Variables

var EndpointExclude = map[string]bool{
	"127.0.0.1":                            true,
	"0.0.0.0":                              true,
	"localhost":                            true,
	"kubernetes.default.svc.cluster.local": true,
	"kubernetes.default.svc.cluster":       true,
	"kubernetes.default.svc":               true,
	"kubernetes.default":                   true,
	"kubernetes":                           true,
}

Types

type KubeSecretReader

type KubeSecretReader struct {
	Namespace string
}

func (*KubeSecretReader) Get

func (ksr *KubeSecretReader) Get(secretName string, client *kubernetes.Clientset) (string, error)

Get returns a K8s secret object with the specified name from a Kubernetes configuration if it exists

type Kubernetes

type Kubernetes struct {
	Config       *rest.Config
	SecretReader SecretReader
	// contains filtered or unexported fields
}

func NewKubernetes

func NewKubernetes() (*Kubernetes, error)

func (*Kubernetes) CA

func (k *Kubernetes) CA() ([]byte, error)

func (*Kubernetes) Endpoint

func (k *Kubernetes) Endpoint() (string, error)

Find a suitable Endpoint to use by inspecting the engine's Ingress and Service manifests

func (*Kubernetes) GetSecret

func (k *Kubernetes) GetSecret(secret string) (string, error)

GetSecret returns a K8s secret object with the specified name from the current namespace if it exists

func (*Kubernetes) Name

func (k *Kubernetes) Name() (string, error)

func (*Kubernetes) Namespace

func (k *Kubernetes) Namespace() (string, error)

func (*Kubernetes) SaToken

func (k *Kubernetes) SaToken() (string, error)

func (*Kubernetes) UpdateRoles

func (k *Kubernetes) UpdateRoles(roles []api.Role) error

UpdateRoles converts API roles to role-bindings in the current cluster

type RoleBinding

type RoleBinding struct {
	Role  string
	Users []string
}

type SecretReader

type SecretReader interface {
	Get(secretName string, client *kubernetes.Clientset) (string, error)
}

func NewSecretReader

func NewSecretReader(namespace string) SecretReader