v1

Documentation

Index

• Constants
• func EnsureAssetsInNamespace(config *Config) error
• func MutateCaInjection(pod *corev1.Pod, config *Config) error
• func MutateEgress(pod *corev1.Pod, config *Config) error
• func MutateInjection(pod *corev1.Pod, config *Config) error
• type Config
  • func (c *Config) GetAnnotation(key string) string
  • func (c *Config) Init(pod *corev1.Pod) error
• type EgressType
• type Registration
  • func FetchRegistration(token string) (*Registration, error)
• type RegistrationResponse
• type Webhook
  • func (w *Webhook) Handle(ctx context.Context, req admission.Request) admission.Response

Constants

const DEFAULT_ENDPOINT = "https://api.qpoint.io"

const INIT_IMAGE = "us-docker.pkg.dev/qpoint-edge/public/kubernetes-qtap-init"

const INJECT_ANNOTATIONS_CONFIGMAP = "qtap-operator-inject-pod-annotations-configmap"

const NAMESPACE_EGRESS_LABEL = "qpoint.io/egress"

const POD_EGRESS_LABEL = "qpoint.io/egress"

const QPOINT_ROOT_CA = "qpoint-qtap-ca.crt" // this is the Qpoint CA

const QTAP_BUNDLE = "qtap-ca-bundle.crt" // final bundle includes all CAs (including Qpoint's CA)

const QTAP_IMAGE = "us-docker.pkg.dev/qpoint-edge/public/qtap"

const SERVICE_ANNOTATIONS_CONFIGMAP = "qtap-operator-service-pod-annotations-configmap"

Functions

func EnsureAssetsInNamespace

func EnsureAssetsInNamespace(config *Config) error

func MutateCaInjection

func MutateCaInjection(pod *corev1.Pod, config *Config) error

func MutateEgress

func MutateEgress(pod *corev1.Pod, config *Config) error

func MutateInjection

func MutateInjection(pod *corev1.Pod, config *Config) error

Types

type Config

type Config struct {
	EgressType        EgressType
	InjectCa          bool
	Namespace         string
	OperatorNamespace string
	Client            client.Client
	Ctx               context.Context
	// contains filtered or unexported fields
}

func (*Config) GetAnnotation

func (c *Config) GetAnnotation(key string) string

func (*Config) Init

func (c *Config) Init(pod *corev1.Pod) error

type EgressType

type EgressType string

const (
	EgressType_UNDEFINED EgressType = "undefined"
	EgressType_DISABLE   EgressType = "disable"
	EgressType_SERVICE   EgressType = "service"
	EgressType_INJECT    EgressType = "inject"
)

type Registration

type Registration struct {
	Ca string `json:"ca"`
}

func FetchRegistration

func FetchRegistration(token string) (*Registration, error)

type RegistrationResponse

type RegistrationResponse struct {
	Registration Registration `json:"registration"`
}

type Webhook

type Webhook struct {
	Namespace   string
	ApiClient   client.Client
	Decoder     *admission.Decoder
	Development bool
}

func (*Webhook) Handle

func (w *Webhook) Handle(ctx context.Context, req admission.Request) admission.Response