aws

Documentation

Index

• Constants
• Variables
• func NewClientFromSecretRef(ctx context.Context, client client.Client, secretRef corev1.SecretReference, ...) (awsclient.Interface, error)
• type Credentials
  • func ReadCredentialsSecret(secret *corev1.Secret) (*Credentials, error)

Constants

const (
	// Name is the name of the AWS provider.
	Name = "provider-aws"
	// StorageProviderName is the name of the AWS storage provider.
	StorageProviderName = "S3"

	// MachineControllerManagerImageName is the name of the MachineControllerManager image.
	MachineControllerManagerImageName = "machine-controller-manager"
	// TerraformerImageName is the name of the Terraformer image.
	TerraformerImageName = "terraformer"
	// HyperkubeImageName is the name of the hyperkube image.
	HyperkubeImageName = "hyperkube"
	// ETCDBackupRestoreImageName is the name of the etcd backup and restore image.
	ETCDBackupRestoreImageName = "etcd-backup-restore"

	// AccessKeyID is a constant for the key in a cloud provider secret and backup secret that holds the AWS access key id.
	AccessKeyID = "accessKeyID"
	// SecretAccessKey is a constant for the key in a cloud provider secret and backup secret that holds the AWS secret access key.
	SecretAccessKey = "secretAccessKey"
	// Region is a constant for the key in a backup secret that holds the AWS region.
	Region = "region"
	// BucketName is a constant for the key in a backup secret that holds the bucket name.
	// The bucket name is written to the backup secret by Gardener as a temporary solution.
	// TODO In the future, the bucket name should come from a BackupBucket resource (see https://github.com/gardener/gardener/blob/master/docs/proposals/02-backupinfra.md)
	BucketName = "bucketName"
	// TerraformerPurposeInfra is a constant for the complete Terraform setup with purpose 'infrastructure'.
	TerraformerPurposeInfra = "infra"
	// VPCIDKey is the vpc_id tf state key
	VPCIDKey = "vpc_id"
	// SubnetPublicPrefix is the prefix for the subnets
	SubnetPublicPrefix = "subnet_public_utility_z"
	// SubnetNodesPrefix is the prefix for the subnets
	SubnetNodesPrefix = "subnet_nodes_z"
	// SecurityGroupsNodes is the key for accessing nodes security groups from outputs in terraform
	SecurityGroupsNodes = "security_group_nodes"
	// SSHKeyName key for accessing SSH key name from outputs in terraform
	SSHKeyName = "keyName"
	// IAMInstanceProfileNodes key for accessing Nodes Instance profile from outputs in terraform
	IAMInstanceProfileNodes = "iamInstanceProfileNodes"
	// IAMInstanceProfileBastions key for accessing Bastions Instance profile from outputs in terraform
	IAMInstanceProfileBastions = "iamInstanceProfileBastions"
	// NodesRole role for nodes
	NodesRole = "nodes_role_arn"
	// BastionsRole role for bastions
	BastionsRole = "bastions_role_arn"

	// CloudProviderConfigName is the name of the configmap containing the cloud provider config.
	CloudProviderConfigName = "cloud-provider-config"
	// MachineControllerManagerName is a constant for the name of the machine-controller-manager.
	MachineControllerManagerName = "machine-controller-manager"
	// BackupSecretName is the name of the secret containing the credentials for storing the backups of Shoot clusters.
	BackupSecretName = "etcd-backup"
)

const Type = "aws"

Type is the type of resources managed by the AWS actuator.

Variables

var (
	// ChartsPath is the path to the charts
	ChartsPath = filepath.Join("controllers", Name, "charts")
	// InternalChartsPath is the path to the internal charts
	InternalChartsPath = filepath.Join(ChartsPath, "internal")
)

Functions

func NewClientFromSecretRef

func NewClientFromSecretRef(ctx context.Context, client client.Client, secretRef corev1.SecretReference, region string) (awsclient.Interface, error)

NewClientFromSecretRef creates a new Client for the given AWS credentials from given k8s <secretRef> and the AWS region <region>.

Types

type Credentials

type Credentials struct {
	AccessKeyID     []byte
	SecretAccessKey []byte
}

Credentials stores AWS credentials.

func ReadCredentialsSecret

func ReadCredentialsSecret(secret *corev1.Secret) (*Credentials, error)

ReadCredentialsSecret reads a secret containing credentials.