peeringroles

Documentation

Overview

Package peeringroles implements some utility functions to retrieve the ClusterRoles to bind in the different peering phases

Index

• type PeeringPermission
  • func GetPeeringPermission(ctx context.Context, client kubernetes.Interface) (*PeeringPermission, error)

Types

type PeeringPermission

type PeeringPermission struct {
	// to be enabled with the creation of the Tenant Namespace,
	// these ClusterRoles have the basic permissions to give to a remote cluster
	Basic []*rbacv1.ClusterRole
	// to be enabled when a ResourceRequest has been accepted,
	// these ClusterRoles have the permissions required by a remote cluster
	// to manage an outgoing peering (incoming for the local cluster),
	// when the Pods will be offloaded to the local cluster
	Incoming []*rbacv1.ClusterRole
	// to be enabled when we send a ResourceRequest,
	// these ClusterRoles have the permissions required by a remote cluster
	// to manage an incoming peering (outgoing for the local cluster),
	// when the Pods will be offloaded from the local cluster
	Outgoing []*rbacv1.ClusterRole
}

PeeringPermission contains the reference to the ClusterRoles to bind in the different peering phases.

func GetPeeringPermission

func GetPeeringPermission(ctx context.Context, client kubernetes.Interface) (*PeeringPermission, error)

GetPeeringPermission populates a PeeringPermission with the ClusterRole names provided by the configuration.