Documentation ¶
Index ¶
Constants ¶
View Source
const ( // KubeCube all the begin KubeCube = "kubecube" // Warden is willing to kubecube Warden = "warden" // ApiPathRoot the root api route ApiPathRoot = "/api/v1/cube" // CubeNamespace kubecube default namespace CubeNamespace = "kubecube-system" // PivotCluster pivot cluster name PivotCluster = "pivot-cluster" // DefaultPivotCubeClusterIPSvc default pivot cube svc DefaultPivotCubeClusterIPSvc = "kubecube.kubecube-system:7443" DefaultAuditURL = "http://audit.kubecube-system:8888/api/v1/cube/audit/cube" )
View Source
const ( HttpHeaderContentType = "Content-type" HttpHeaderContentDisposition = "Content-Disposition" HttpHeaderContentTypeOctet = "application/octet-stream" ImpersonateUserKey = "Impersonate-User" ImpersonateGroupKey = "Impersonate-Group" )
http content
View Source
const ( EventName = "event" EventTypeUserWrite = "userwrite" EventResourceType = "resourceType" EventAccountId = "accountId" AuthorizationHeader = "Authorization" DefaultTokenExpireDuration = 3600 // 1 hour )
audit and user constant
View Source
const ( K8sResourceVersion = "v1" K8sResourceNamespace = "namespaces" K8sResourcePod = "pods" K8sKindClusterRole = "ClusterRole" K8sKindRole = "Role" K8sKindServiceAccount = "ServiceAccount" K8sGroupRBAC = "rbac.authorization.k8s.io" )
k8s api resources
View Source
const ( PlatformAdmin = "platform-admin" TenantAdmin = "tenant-admin" ProjectAdmin = "project-admin" Reviewer = "reviewer" TenantAdminCluster = "tenant-admin-cluster" ProjectAdminCluster = "project-admin-cluster" ReviewerCluster = "reviewer-cluster" PlatformAdminAgLabel = "rbac.authorization.k8s.io/aggregate-to-platform-admin" TenantAdminAgLabel = "rbac.authorization.k8s.io/aggregate-to-tenant-admin" ProjectAdminAgLabel = "rbac.authorization.k8s.io/aggregate-to-project-admin" ReviewerAgLabel = "rbac.authorization.k8s.io/aggregate-to-reviewer" )
rbac related constant
View Source
const ( // ClusterLabel indicates the resource which cluster relate with ClusterLabel = "kubecube.io/cluster" // TenantLabel represent which tenant resource relate with TenantLabel = "kubecube.io/tenant" // ProjectLabel represent which project resource relate with ProjectLabel = "kubecube.io/project" // CubeQuotaLabel point to CubeResourceQuota CubeQuotaLabel = "kubecube.io/quota" // RbacLabel indicates the resource of rbac is related with kubecube RbacLabel = "kubecube.io/rbac" // RoleLabel indicates the role of rbac policy RoleLabel = "kubecube.io/role" // CrdLabel indicates the crds kubecube need to dispatch CrdLabel = "kubecube.io/crds" // SyncAnnotation use for sync logic of warden SyncAnnotation = "kubecube.io/sync" )
View Source
const (
// CubeNodeTaint is node taint that managed by KubeCube
CubeNodeTaint = "node.kubecube.io"
)
View Source
const (
// HncInherited means resource is inherited form upon namespace by hnc
HncInherited = "hnc.x-k8s.io/inherited-from"
)
hnc related conest
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.