Documentation ¶
Index ¶
- func AWSErrorCode(err error) string
- func AssumeRole(sess *session.Session, roleSessionName, roleArn string) (*credentials.Credentials, error)
- func AssumeRoleWithWebIdentity(sess *session.Session, roleSessionName, roleArn, token string) (*credentials.Credentials, error)
- func DefaultWorkerSGEgressRules() []*ec2.IpPermission
- func DefaultWorkerSGIngressRules(machineCIDRs []string, sgGroupID, sgUserID string) []*ec2.IpPermission
- func GetSecurityGroup(ec2Client ec2iface.EC2API, filter []*ec2.Filter) (*ec2.SecurityGroup, error)
- func GetSecurityGroupById(ec2Client ec2iface.EC2API, id string) (*ec2.SecurityGroup, error)
- func VPCEndpointSecurityGroupRules(machineCIDRs []string, port int64) []*ec2.IpPermission
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AWSErrorCode ¶ added in v0.1.48
func AssumeRole ¶ added in v0.1.32
func AssumeRole(sess *session.Session, roleSessionName, roleArn string) (*credentials.Credentials, error)
func AssumeRoleWithWebIdentity ¶ added in v0.1.2
func AssumeRoleWithWebIdentity(sess *session.Session, roleSessionName, roleArn, token string) (*credentials.Credentials, error)
func DefaultWorkerSGEgressRules ¶
func DefaultWorkerSGEgressRules() []*ec2.IpPermission
func DefaultWorkerSGIngressRules ¶
func DefaultWorkerSGIngressRules(machineCIDRs []string, sgGroupID, sgUserID string) []*ec2.IpPermission
DefaultWorkerSGIngressRules templates out the required inbound security group rules for the default worker security group. This AWS security group is attached to worker node EC2 instances and the PrivateLink VPC Endpoint for the Hosted Control Plane. Sources: - https://github.com/openshift/installer/blob/da42a4d4020f8c8d8140c0cdc45ee11932343f7d/pkg/asset/manifests/aws/cluster.go#L48-L122 - https://github.com/openshift/installer/blob/da42a4d4020f8c8d8140c0cdc45ee11932343f7d/upi/aws/cloudformation/03_cluster_security.yaml
func GetSecurityGroup ¶ added in v0.1.48
func GetSecurityGroupById ¶ added in v0.1.48
func VPCEndpointSecurityGroupRules ¶ added in v0.1.48
func VPCEndpointSecurityGroupRules(machineCIDRs []string, port int64) []*ec2.IpPermission
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.