Versions in this module Expand all Collapse all v1 v1.0.1 Nov 28, 2023 Changes in this version + const AmzRequestID + const CertPasswordEnv + const ConsoleTLSEnv + const DefaultConsoleDeploymentName + const DefaultDeploymentName + const DefaultOperatorImage + const DefaultOperatorImageEnv + const ErrResourceExists + const HealthHealingMessage + const HealthReduceAvailabilityMessage + const HealthUnavailableMessage + const HostnameEnv + const MessageResourceExists + const OpenshiftCATLSSecretName + const OpenshiftKubeControllerNamespace + const OperatorCATLSSecretName + const OperatorCSRSignerCASecretName + const OperatorConsoleTLSSecretName + const OperatorDeploymentNameEnv + const OperatorWatchedNamespaceEnv + const STSDefaultPort + const STSEnabled + const STSEndpoint + const STSTLSSecretName + const StatusDecommissioningNotAllowed + const StatusFailedAlreadyExists + const StatusInconsistentMinIOVersions + const StatusInitialized + const StatusNotOwned + const StatusProvisioningCIService + const StatusProvisioningConsoleService + const StatusProvisioningDefaultBuckets + const StatusProvisioningHLService + const StatusProvisioningInitialUsers + const StatusProvisioningKESStatefulSet + const StatusProvisioningStatefulSet + const StatusRestartingMinIO + const StatusTenantCredentialsNotSet + const StatusUpdatingKES + const StatusUpdatingMinIOVersion + const StatusWaitingKESCert + const StatusWaitingMinIOCert + const StatusWaitingMinIOClientCert + const WebhookSecret + var ErrEmptyRootCredentials = errors.New("empty tenant credentials") + var ErrMinIONotReady = fmt.Errorf("MinIO is not ready") + var ErrMinIORestarting = fmt.Errorf("MinIO is restarting") + func AssumeRole(ctx context.Context, c *Controller, tenant *miniov2.Tenant, region string, ...) (*credentials.Value, error) + func GetPolicy(ctx context.Context, adminClient *madmin.AdminClient, policyName string) (*madmin.PolicyInfo, error) + func IsSTSEnabled() bool + func LoadX509KeyPair(certFile, keyFile string) (tls.Certificate, error) + func MinIOControllerRateLimiter() queue.RateLimiter + func StartOperator(kubeconfig string) + type APIError struct + Code string + Description string + HTTPStatusCode int + type AssumeRoleWithWebIdentityResponse struct + ResponseMetadata struct{ ... } + Result WebIdentityResult + XMLName xml.Name + type AssumedRoleUser struct + Arn string + AssumedRoleID string + type Controller struct + func NewController(podName string, namespacesToWatch set.StringSet, ...) *Controller + func (c *Controller) AssumeRoleWithWebIdentityHandler(w http.ResponseWriter, r *http.Request) + func (c *Controller) CreateOrUpdatePDB(ctx context.Context, t *v2.Tenant) (err error) + func (c *Controller) DeletePDB(ctx context.Context, t *v2.Tenant) (err error) + func (c *Controller) GetOpenshiftCSRSignerCAFromSecret() ([]byte, error) + func (c *Controller) GetPDBAvailable() PDBAvailable + func (c *Controller) GetSignerCAFromSecret() ([]byte, error) + func (c *Controller) Start(threadiness int, stopCh <-chan struct{}) error + func (c *Controller) Stop() + func (c *Controller) ValidateServiceAccountJWT(ctx *context.Context, token string) (*authv1.TokenReview, error) + type Credentials struct + AccessKey string + Claims map[string]interface{} + Expiration time.Time + Groups []string + ParentUser string + SecretKey string + SessionToken string + Status string + type EventNotification struct + Err error + Type EventType + type EventType int + const LeaderElection + const STSServerNotification + type HealthResult struct + HealingDrives int + StatusCode int + WriteQuorumDrives int + type MinIOPrometheusMetrics struct + UsableCapacity int64 + Usage int64 + type PDBAvailable struct + func (p *PDBAvailable) Available() bool + func (p *PDBAvailable) V1Available() bool + func (p *PDBAvailable) V1BetaAvailable() bool + type ReqInfo struct + API string + AccessKey string + Host string + RemoteHost string + RequestID string + TenantNamespace string + UserAgent string + type Result struct + Requeue bool + RequeueAfter time.Duration + func WrapResult(result Result, err error) (Result, error) + type STSErrorCode int + const ErrSTSAccessDenied + const ErrSTSClientGrantsExpiredToken + const ErrSTSIDPCommunicationError + const ErrSTSInsecureConnection + const ErrSTSInternalError + const ErrSTSInvalidClientCertificate + const ErrSTSInvalidClientGrantsToken + const ErrSTSInvalidIdentityToken + const ErrSTSInvalidParameterValue + const ErrSTSMalformedPolicyDocument + const ErrSTSMissingParameter + const ErrSTSNone + const ErrSTSNotInitialized + const ErrSTSPackedPolicyTooLarge + const ErrSTSUpstreamError + const ErrSTSWebIdentityExpiredToken + type STSErrorResponse struct + Error struct{ ... } + RequestID string + XMLName xml.Name + type WebIdentityResult struct + AssumedRoleUser AssumedRoleUser + Audience string + Credentials Credentials + PackedPolicySize int + Provider string + SubjectFromWebIdentityToken string