nsnetworkpolicy

Documentation

Index

• Constants
• type NSNetworkPolicyController
  • func NewNSNetworkPolicyController(client kubernetes.Interface, ksclient ksnetclient.NetworkV1alpha1Interface, ...) *NSNetworkPolicyController
  • func (c *NSNetworkPolicyController) Run(threadiness int, reconcilerPeriod string, stopCh <-chan struct{}) error
  • func (c *NSNetworkPolicyController) Start(ctx context.Context) error

Constants

const (

	//whether network isolate is enable in namespace
	NamespaceNPAnnotationKey     = "kubesphere.io/network-isolate"
	NamespaceNPAnnotationEnabled = "enabled"

	NodeNSNPAnnotationKey = "kubesphere.io/snat-node-ips"

	AnnotationNPNAME = v1alpha1.NSNPPrefix + "network-isolate"

	//TODO: configure it
	DNSLocalIP        = "169.254.25.10"
	DNSPort           = 53
	DNSNamespace      = "kube-system"
	DNSServiceName    = "kube-dns"
	DNSServiceCoreDNS = "coredns"
)

Types

type NSNetworkPolicyController

type NSNetworkPolicyController struct {
	// contains filtered or unexported fields
}

namespacenpController implements the Controller interface for managing kubesphere network policies and convery them to k8s NetworkPolicies, then syncing them to the provider.

func NewNSNetworkPolicyController

func NewNSNetworkPolicyController(
	client kubernetes.Interface,
	ksclient ksnetclient.NetworkV1alpha1Interface,
	nsnpInformer nspolicy.NamespaceNetworkPolicyInformer,
	serviceInformer v1.ServiceInformer,
	nodeInformer v1.NodeInformer,
	workspaceInformer workspace.WorkspaceInformer,
	namespaceInformer v1.NamespaceInformer,
	policyProvider provider.NsNetworkPolicyProvider,
	options options.NSNPOptions) *NSNetworkPolicyController

NewnamespacenpController returns a controller which manages NSNSP objects.

func (*NSNetworkPolicyController) Run

func (c *NSNetworkPolicyController) Run(threadiness int, reconcilerPeriod string, stopCh <-chan struct{}) error

Run starts the controller.

func (*NSNetworkPolicyController) Start

func (c *NSNetworkPolicyController) Start(ctx context.Context) error