rte

Documentation

Index

• Constants
• func DaemonSetNamespacedNameFromObject(obj client.Object) (nropv1alpha1.NamespacedName, bool)
• func GetMachineConfigLabel(mcp *machineconfigv1.MachineConfigPool) map[string]string
• func UpdateDaemonSetHashAnnotation(ds *appsv1.DaemonSet, cmHash string)
• func UpdateDaemonSetPauseContainerSettings(ds *appsv1.DaemonSet) error
• func UpdateDaemonSetRunAsIDs(ds *appsv1.DaemonSet)
• func UpdateDaemonSetUserImageSettings(ds *appsv1.DaemonSet, userImageSpec, builtinImageSpec string, ...) error
• type ExistingManifests
  • func FromClient(ctx context.Context, cli client.Client, plat platform.Platform, ...) ExistingManifests
  • func (em *ExistingManifests) MachineConfigsState(mf rtemanifests.Manifests, instance *nropv1alpha1.NUMAResourcesOperator, ...) []objectstate.ObjectState
  • func (em *ExistingManifests) State(mf rtemanifests.Manifests, plat platform.Platform, ...) []objectstate.ObjectState

Constants

const MachineConfigLabelKey = "machineconfiguration.openshift.io/role"

MachineConfigLabelKey contains the key of generated label for machine config

Functions

func DaemonSetNamespacedNameFromObject

func DaemonSetNamespacedNameFromObject(obj client.Object) (nropv1alpha1.NamespacedName, bool)

func GetMachineConfigLabel

func GetMachineConfigLabel(mcp *machineconfigv1.MachineConfigPool) map[string]string

GetMachineConfigLabel returns machine config labels that should be used under the machine config pool machine config selector

func UpdateDaemonSetHashAnnotation

func UpdateDaemonSetHashAnnotation(ds *appsv1.DaemonSet, cmHash string)

func UpdateDaemonSetPauseContainerSettings

func UpdateDaemonSetPauseContainerSettings(ds *appsv1.DaemonSet) error

func UpdateDaemonSetRunAsIDs

func UpdateDaemonSetRunAsIDs(ds *appsv1.DaemonSet)

UpdateDaemonSetRunAsIDs bump the ds container privileges to 0/0. We need this in the operator-as-operand flow because the operator image itself is built to run with non-root user/group, and we should keep it like this. OTOH, the rte image needs to have access to the files using *both* DAC and MAC; the SCC/SELinux context take cares of the MAC (when needed, e.g. on OCP), while we take care of DAC here.

func UpdateDaemonSetUserImageSettings

func UpdateDaemonSetUserImageSettings(ds *appsv1.DaemonSet, userImageSpec, builtinImageSpec string, builtinPullPolicy corev1.PullPolicy) error

Types

type ExistingManifests

type ExistingManifests struct {
	// contains filtered or unexported fields
}

func FromClient

func FromClient(
	ctx context.Context,
	cli client.Client,
	plat platform.Platform,
	mf rtemanifests.Manifests,
	instance *nropv1alpha1.NUMAResourcesOperator,
	mcps []*machineconfigv1.MachineConfigPool,
	namespace string,
) ExistingManifests

func (*ExistingManifests) MachineConfigsState

func (em *ExistingManifests) MachineConfigsState(mf rtemanifests.Manifests, instance *nropv1alpha1.NUMAResourcesOperator, mcps []*machineconfigv1.MachineConfigPool) []objectstate.ObjectState

func (*ExistingManifests) State

func (em *ExistingManifests) State(mf rtemanifests.Manifests, plat platform.Platform, instance *nropv1alpha1.NUMAResourcesOperator, mcps []*machineconfigv1.MachineConfigPool) []objectstate.ObjectState