injector

Documentation

Overview

Package injector implements OSM's automatic sidecar injection facility. The sidecar injector's mutating webhook admission controller intercepts pod creation requests to mutate the pod spec to inject the sidecar proxy.

Index

• Constants
• func NewMutatingWebhook(ctx context.Context, kubeClient kubernetes.Interface, ...) error
• type BootstrapSecretRotator
  • func NewBootstrapSecretRotator(compIf compute.Interface, certManager *certificate.Manager, ...) *BootstrapSecretRotator
  • func (b *BootstrapSecretRotator) StartBootstrapSecretRotationTicker(ctx context.Context)
• type Config

Constants

const (
	// MutatingWebhookName is the name of the mutating webhook used for sidecar injection
	MutatingWebhookName = "osm-inject.k8s.io"
)

Functions

func NewMutatingWebhook

func NewMutatingWebhook(ctx context.Context, kubeClient kubernetes.Interface, certManager *certificate.Manager, kubeController k8s.Controller, meshName, osmNamespace, webhookConfigName, osmVersion string, webhookTimeout int32, enableReconciler bool, osmContainerPullPolicy corev1.PullPolicy) error

NewMutatingWebhook starts a new web server handling requests from the injector MutatingWebhookConfiguration

Types

type BootstrapSecretRotator

type BootstrapSecretRotator struct {
	// contains filtered or unexported fields
}

BootstrapSecretRotator is the type used to represent the information needed for bootstrap secret rotation

func NewBootstrapSecretRotator

func NewBootstrapSecretRotator(compIf compute.Interface, certManager *certificate.Manager, checkInterval time.Duration) *BootstrapSecretRotator

NewBootstrapSecretRotator returns a new bootstrap secret rotator.

func (*BootstrapSecretRotator) StartBootstrapSecretRotationTicker

func (b *BootstrapSecretRotator) StartBootstrapSecretRotationTicker(ctx context.Context)

StartBootstrapSecretRotationTicker will start a ticker to check if the bootstrap secrets should be updated every BootstrapSecretRotator check interval

type Config

type Config struct {
	// ListenPort defines the port on which the sidecar injector listens
	ListenPort int
}

Config is the type used to represent the config options for the sidecar injection