nsxserviceaccount

Documentation

Index

• Constants
• func GenerateNSXServiceAccountConditions(existingConditions []metav1.Condition, generation int64, ...) []metav1.Condition
• func IsNSXServiceAccountRealized(status *v1alpha1.NSXServiceAccountStatus) bool
• type ClusterControlPlaneStore
  • func (s *ClusterControlPlaneStore) Apply(i interface{}) error
• type NSXServiceAccountService
  • func InitializeNSXServiceAccount(service common.Service) (*NSXServiceAccountService, error)
  • func (s *NSXServiceAccountService) CreateOrUpdateNSXServiceAccount(ctx context.Context, obj *v1alpha1.NSXServiceAccount) error
  • func (s *NSXServiceAccountService) DeleteNSXServiceAccount(ctx context.Context, namespacedName types.NamespacedName, uid types.UID) error
  • func (s *NSXServiceAccountService) GetNSXServiceAccountNameByUID(uid string) (namespacedName types.NamespacedName)
  • func (s *NSXServiceAccountService) ListNSXServiceAccountRealization() sets.Set[string]
  • func (s *NSXServiceAccountService) RestoreRealizedNSXServiceAccount(ctx context.Context, obj *v1alpha1.NSXServiceAccount) error
  • func (s *NSXServiceAccountService) SetUpStore()
  • func (s *NSXServiceAccountService) ValidateAndUpdateRealizedNSXServiceAccount(ctx context.Context, obj *v1alpha1.NSXServiceAccount, ca []byte) error
• type PrincipalIdentityStore
  • func (s *PrincipalIdentityStore) Apply(i interface{}) error
  • func (s *PrincipalIdentityStore) IsPolicyAPI() bool

Constants

const (
	PortRestAPI        = "rest-api"
	PortNSXRPCFwdProxy = "nsx-rpc-fwd-proxy"
	// #nosec G101: false positive triggered by variable name which includes "secret"
	SecretSuffix   = "-nsx-cert"
	SecretCAName   = "ca.crt"
	SecretCertName = "tls.crt"
	SecretKeyName  = "tls.key"
	CAName         = "ca.crt"
)

Functions

func GenerateNSXServiceAccountConditions

func GenerateNSXServiceAccountConditions(existingConditions []metav1.Condition, generation int64, realizedStatus metav1.ConditionStatus, realizedReason string, message string) []metav1.Condition

func IsNSXServiceAccountRealized

func IsNSXServiceAccountRealized(status *v1alpha1.NSXServiceAccountStatus) bool

Types

type ClusterControlPlaneStore

type ClusterControlPlaneStore struct {
	common.ResourceStore
}

ClusterControlPlaneStore is a store for ClusterControlPlane

func (*ClusterControlPlaneStore) Apply

func (s *ClusterControlPlaneStore) Apply(i interface{}) error

type NSXServiceAccountService

type NSXServiceAccountService struct {
	common.Service
	PrincipalIdentityStore   *PrincipalIdentityStore
	ClusterControlPlaneStore *ClusterControlPlaneStore
}

func InitializeNSXServiceAccount

func InitializeNSXServiceAccount(service common.Service) (*NSXServiceAccountService, error)

InitializeNSXServiceAccount sync NSX resources

func (*NSXServiceAccountService) CreateOrUpdateNSXServiceAccount

func (s *NSXServiceAccountService) CreateOrUpdateNSXServiceAccount(ctx context.Context, obj *v1alpha1.NSXServiceAccount) error

func (*NSXServiceAccountService) DeleteNSXServiceAccount

func (s *NSXServiceAccountService) DeleteNSXServiceAccount(ctx context.Context, namespacedName types.NamespacedName, uid types.UID) error

func (*NSXServiceAccountService) GetNSXServiceAccountNameByUID

func (s *NSXServiceAccountService) GetNSXServiceAccountNameByUID(uid string) (namespacedName types.NamespacedName)

func (*NSXServiceAccountService) ListNSXServiceAccountRealization

func (s *NSXServiceAccountService) ListNSXServiceAccountRealization() sets.Set[string]

ListNSXServiceAccountRealization returns all existing realized or failed NSXServiceAccount on NSXT

func (*NSXServiceAccountService) RestoreRealizedNSXServiceAccount

func (s *NSXServiceAccountService) RestoreRealizedNSXServiceAccount(ctx context.Context, obj *v1alpha1.NSXServiceAccount) error

RestoreRealizedNSXServiceAccount checks if PI/CCP is created on NSXT for a realized NSXServiceAccount. If both PI/CCP is missing, restore PI/CCP from realized NSXServiceAccount and Secret.

func (*NSXServiceAccountService) SetUpStore

func (s *NSXServiceAccountService) SetUpStore()

func (*NSXServiceAccountService) ValidateAndUpdateRealizedNSXServiceAccount

func (s *NSXServiceAccountService) ValidateAndUpdateRealizedNSXServiceAccount(ctx context.Context, obj *v1alpha1.NSXServiceAccount, ca []byte) error

ValidateAndUpdateRealizedNSXServiceAccount checks CA is up-to-date and client cert needs rotation ca is nil means no need to update CA Client cert rotation requires NSXT 4.1.3

type PrincipalIdentityStore

type PrincipalIdentityStore struct {
	common.ResourceStore
}

PrincipalIdentityStore is a store for PrincipalIdentity

func (*PrincipalIdentityStore) Apply

func (s *PrincipalIdentityStore) Apply(i interface{}) error

func (*PrincipalIdentityStore) IsPolicyAPI

func (s *PrincipalIdentityStore) IsPolicyAPI() bool