objects

Documentation

Index

• Constants
• func EnsureRBAC(ctx context.Context, cli client.Client, contour *operatorv1alpha1.Contour) error
• func EnsureRBACDeleted(ctx context.Context, cli client.Client, contour *operatorv1alpha1.Contour) error
• func NewUnprivilegedPodSecurity() *corev1.PodSecurityContext
• func TagFromImage(image string) string

Constants

const (
	// ContourRbacName is the name used for Contour RBAC resources.
	ContourRbacName = "contour"
	// ContourRoleBindingName is a special case RoleBinding name since
	// the certgen RoleBinding name is "contour"
	ContourRoleBindingName = "contour-rolebinding"
	// EnvoyRbacName is the name used for Envoy RBAC resources.
	EnvoyRbacName = "envoy"
	// CertGenRbacName is the name used for Contour certificate
	// generation RBAC resources.
	CertGenRbacName = "contour-certgen"
)

Functions

func EnsureRBAC

func EnsureRBAC(ctx context.Context, cli client.Client, contour *operatorv1alpha1.Contour) error

EnsureRBAC ensures all the necessary RBAC resources exist for the provided contour.

func EnsureRBACDeleted

func EnsureRBACDeleted(ctx context.Context, cli client.Client, contour *operatorv1alpha1.Contour) error

EnsureRBACDeleted ensures all the necessary RBAC resources for the provided contour are deleted if Contour owner labels exist.

func NewUnprivilegedPodSecurity

func NewUnprivilegedPodSecurity() *corev1.PodSecurityContext

NewUnprivilegedPodSecurity makes a a non-root PodSecurityContext object using 65534 as the user and group ID.

func TagFromImage

func TagFromImage(image string) string

TagFromImage returns the tag from the provided image or an empty string if the image does not contain a tag.