roles

Documentation

Index

• Constants
• func BuildMissingOperatorRoleCommand(missingRoles map[string]*cmv1.STSOperator, cluster *cmv1.Cluster, ...) (string, error)
• func CreateMissingRoles(r *rosa.Runtime, missingRolesInCS map[string]*cmv1.STSOperator, ...) error
• func GeOperatorRolePrefixFromClusterName(clusterName string) string
• func GetOperatorRoleName(cluster *cmv1.Cluster, missingOperator *cmv1.STSOperator) string
• func ValidateAccountAndOperatorRolesManagedPolicies(r *rosa.Runtime, cluster *cmv1.Cluster, ...) error
• func ValidateAccountRolesManagedPolicies(r *rosa.Runtime, prefix string, hostedCPPolicies bool) error
• func ValidateAdditionalAllowedPrincipals(aapARNs []string) error
• func ValidateOperatorRolesManagedPolicies(r *rosa.Runtime, cluster *cmv1.Cluster, ...) error
• func ValidateUnmanagedAccountRoles(roleARNs []string, awsClient aws.Client, version string) error

Constants

const (
	RosaUpgradeAccRolesModeAuto = "ROSAUpgradeAccountRolesModeAuto"
)

Functions

func BuildMissingOperatorRoleCommand

func BuildMissingOperatorRoleCommand(
	missingRoles map[string]*cmv1.STSOperator,
	cluster *cmv1.Cluster,
	accountID string,
	r *rosa.Runtime,
	policies map[string]*cmv1.AWSSTSPolicy,
	unifiedPath string,
	operatorRolePolicyPrefix string,
	managedPolicies bool,
) (string, error)

func CreateMissingRoles

func CreateMissingRoles(
	r *rosa.Runtime,
	missingRolesInCS map[string]*cmv1.STSOperator,
	cluster *cmv1.Cluster,
	mode string,
	prefix string,
	policies map[string]*cmv1.AWSSTSPolicy,
	unifiedPath string,
	managedPolicies bool,
) error

func GeOperatorRolePrefixFromClusterName

func GeOperatorRolePrefixFromClusterName(clusterName string) string

GeOperatorRolePrefixFromClusterName returns a valid operator role prefix from the cluster name An operator role prefix is considered valid if it's length is less than or equal to 32 chars. A random 4 characters label is attached to the cluster name to reduce chances of collision. The cluster name and the random label are separate by '-'. If the cluster name is longer than 27 characters, only the first 27 characters will be used.

func GetOperatorRoleName

func GetOperatorRoleName(cluster *cmv1.Cluster, missingOperator *cmv1.STSOperator) string

func ValidateAccountAndOperatorRolesManagedPolicies

func ValidateAccountAndOperatorRolesManagedPolicies(
	r *rosa.Runtime,
	cluster *cmv1.Cluster,
	credRequests map[string]*cmv1.STSOperator,
	unifiedPath string,
	mode string,
	upgradeVersion string,
) error

func ValidateAccountRolesManagedPolicies

func ValidateAccountRolesManagedPolicies(r *rosa.Runtime, prefix string, hostedCPPolicies bool) error

func ValidateAdditionalAllowedPrincipals

func ValidateAdditionalAllowedPrincipals(aapARNs []string) error

func ValidateOperatorRolesManagedPolicies

func ValidateOperatorRolesManagedPolicies(r *rosa.Runtime, cluster *cmv1.Cluster,
	operatorRoles map[string]*cmv1.STSOperator, policies map[string]*cmv1.AWSSTSPolicy, mode string, prefix string,
	unifiedPath string, upgradeVersion string, hostedCPPolicies bool) error

func ValidateUnmanagedAccountRoles

func ValidateUnmanagedAccountRoles(roleARNs []string, awsClient aws.Client, version string) error