controllers

Documentation

Index

• Constants
• func NewImagePullSecretController(kubeclient kubernetes.Interface, secrets informers.SecretInformer) (*imagePullSecretController, kidsChan, urlsChan)
• func NewKeyIDObservationController(kubeclient kubernetes.Interface, secrets informers.SecretInformer, ch kidsChan) *keyIDObservation
• func NewLegacyImagePullSecretController(client kubernetes.Interface, secrets informers.SecretInformer) *legacyImagePullSecretController
• func NewLegacyTokenSecretController(client kubernetes.Interface, secrets informers.SecretInformer) *legacyTokenSecretController
• func NewRegistryURLObservationController(services informers.ServiceInformer, additionalRegistryURLs []string, ...) *registryURLObservation
• func NewServiceAccountController(kubeclient kubernetes.Interface, ...) *serviceAccountController

Constants

const (
	// Annotation added to managed image pull secrets to indicate the service account used in the token.
	InternalRegistryAuthTokenServiceAccountAnnotation = "openshift.io/internal-registry-auth-token.service-account"

	// Annotation added to managed image pull secrets to indicate the service account token's binding type.
	InternalRegistryAuthTokenTypeAnnotation = "openshift.io/internal-registry-auth-token.binding"

	// Annotation added to service accounts to document the corresponding managed image pull secret.
	InternalRegistryImagePullSecretRefKey = "openshift.io/internal-registry-pull-secret-ref"

	// Indicates a bound service account token is used for authentication.
	AuthTokenTypeBound = "bound"

	// Indicates a legacy, long-lived, service account token is used for authentication.
	AuthTokenTypeLegacy = "legacy"
)

Functions

func NewImagePullSecretController

func NewImagePullSecretController(kubeclient kubernetes.Interface, secrets informers.SecretInformer) (*imagePullSecretController, kidsChan, urlsChan)

func NewKeyIDObservationController

func NewKeyIDObservationController(kubeclient kubernetes.Interface, secrets informers.SecretInformer, ch kidsChan) *keyIDObservation

func NewLegacyImagePullSecretController

func NewLegacyImagePullSecretController(client kubernetes.Interface, secrets informers.SecretInformer) *legacyImagePullSecretController

func NewLegacyTokenSecretController

func NewLegacyTokenSecretController(client kubernetes.Interface, secrets informers.SecretInformer) *legacyTokenSecretController

func NewRegistryURLObservationController

func NewRegistryURLObservationController(services informers.ServiceInformer, additionalRegistryURLs []string, ch urlsChan) *registryURLObservation

func NewServiceAccountController

func NewServiceAccountController(kubeclient kubernetes.Interface, serviceAccounts informers.ServiceAccountInformer, secrets informers.SecretInformer) *serviceAccountController

NewServiceAccountController creates a controller that for each service account in the cluster, creates an image pull secret that can be used to pull images from the integrated image registry.