helper

Documentation

Index

• func EnsureFirewallControllerRBAC(ctx context.Context, seedConfig, shootConfig *rest.Config, ...) error
• func GetAccessKubeconfig(c *AccessConfig) ([]byte, error)
• func MustNewFirewallScheme() *runtime.Scheme
• type AccessConfig
• type ShootAccessHelper
  • func NewShootAccessHelper(seed client.Client, access *v2.ShootAccess) *ShootAccessHelper
  • func NewSingleClusterModeHelper(shootConfig *rest.Config) *ShootAccessHelper
  • func (s *ShootAccessHelper) Client(ctx context.Context) (client.Client, error)
  • func (s *ShootAccessHelper) Config(ctx context.Context) (*configv1.Config, error)
  • func (s *ShootAccessHelper) RESTConfig(ctx context.Context) (*rest.Config, error)
  • func (s *ShootAccessHelper) Raw(ctx context.Context) ([]byte, error)
• type ShootAccessTokenUpdater
  • func NewShootAccessTokenUpdater(s *ShootAccessHelper, tokenDir string) (*ShootAccessTokenUpdater, error)
  • func (s *ShootAccessTokenUpdater) UpdateContinuously(log logr.Logger, stop context.Context) error
  • func (s *ShootAccessTokenUpdater) UpdateShootAccess(shootAccess *v2.ShootAccess)

Functions

func EnsureFirewallControllerRBAC

func EnsureFirewallControllerRBAC(ctx context.Context, seedConfig, shootConfig *rest.Config, deploy *v2.FirewallDeployment, shootNamespace string, shootAccess *v2.ShootAccess) error

func GetAccessKubeconfig

func GetAccessKubeconfig(c *AccessConfig) ([]byte, error)

func MustNewFirewallScheme

func MustNewFirewallScheme() *runtime.Scheme

Types

type AccessConfig

type AccessConfig struct {
	Ctx          context.Context
	Config       *rest.Config
	Namespace    string
	ApiServerURL string
	Deployment   *v2.FirewallDeployment
	ForShoot     bool
}

type ShootAccessHelper

type ShootAccessHelper struct {
	// contains filtered or unexported fields
}

func NewShootAccessHelper

func NewShootAccessHelper(seed client.Client, access *v2.ShootAccess) *ShootAccessHelper

NewShootAccessHelper provides shoot access functions based on shoot access secrets, i.e. Gardener's generic kubeconfig and token secret.

func NewSingleClusterModeHelper

func NewSingleClusterModeHelper(shootConfig *rest.Config) *ShootAccessHelper

NewSingleClusterModeHelper provides shoot access functions when running in a single-mode cluster, i.e. the shoot client equals the seed client.

func (*ShootAccessHelper) Client

func (s *ShootAccessHelper) Client(ctx context.Context) (client.Client, error)

func (*ShootAccessHelper) Config

func (s *ShootAccessHelper) Config(ctx context.Context) (*configv1.Config, error)

func (*ShootAccessHelper) RESTConfig

func (s *ShootAccessHelper) RESTConfig(ctx context.Context) (*rest.Config, error)

func (*ShootAccessHelper) Raw

func (s *ShootAccessHelper) Raw(ctx context.Context) ([]byte, error)

type ShootAccessTokenUpdater

type ShootAccessTokenUpdater struct {
	// contains filtered or unexported fields
}

func NewShootAccessTokenUpdater

func NewShootAccessTokenUpdater(s *ShootAccessHelper, tokenDir string) (*ShootAccessTokenUpdater, error)

func (*ShootAccessTokenUpdater) UpdateContinuously

func (s *ShootAccessTokenUpdater) UpdateContinuously(log logr.Logger, stop context.Context) error

func (*ShootAccessTokenUpdater) UpdateShootAccess

func (s *ShootAccessTokenUpdater) UpdateShootAccess(shootAccess *v2.ShootAccess)