GO-2024-2930: RKE credentials are stored in the RKE1 Cluster state ConfigMap in github.com/rancher/rke

k8s

package

v1.4.18 Latest Latest Go to latest Published: May 13, 2024 License: Apache-2.0 Imports: 18 Imported by: 171

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/rancher/rke

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func ApplyK8sSystemJob(jobYaml, kubeConfigPath string, k8sWrapTransport transport.WrapperFunc, ...) error
func CordonUncordon(k8sClient *kubernetes.Clientset, nodeName string, nodeAddress string, ...) error
func DecodeYamlResource(resource interface{}, yamlManifest string) error
func DeleteConfigMap(k8sClient *kubernetes.Clientset, configMapName string) error
func DeleteDeploymentIfExists(ctx context.Context, k8sClient *kubernetes.Clientset, name, namespace string) error
func DeleteK8sJobIfExists(k8sClient *kubernetes.Clientset, name, namespace string) error
func DeleteK8sSystemJob(jobYaml string, k8sClient *kubernetes.Clientset, timeout int) error
func DeleteNode(k8sClient *kubernetes.Clientset, nodeName string, nodeAddress string, ...) error
func DeletePods(k8sClient *kubernetes.Clientset, podList *v1.PodList) error
func DeleteServiceIfExists(ctx context.Context, k8sClient *kubernetes.Clientset, name, namespace string) error
func GetConfigMap(k8sClient *kubernetes.Clientset, configMapName string) (*v1.ConfigMap, error)
func GetNode(k8sClient *kubernetes.Clientset, ...) (*v1.Node, error)
func GetNodeList(k8sClient *kubernetes.Clientset) (*v1.NodeList, error)
func GetSecret(k8sClient *kubernetes.Clientset, secretName, namespace string) (*v1.Secret, error)
func GetSecretsList(k8sClient *kubernetes.Clientset, namespace string) (*v1.SecretList, error)
func GetSystemSecret(k8sClient *kubernetes.Clientset, secretName string) (*v1.Secret, error)
func IsNodeReady(node v1.Node) bool
func ListPodsByLabel(k8sClient *kubernetes.Clientset, label string) (*v1.PodList, error)
func NewClient(kubeConfigPath string, k8sWrapTransport transport.WrapperFunc) (*kubernetes.Clientset, error)
func SetNodeAddressesAnnotations(node *v1.Node, internalAddress, externalAddress string)
func SyncNodeLabels(node *v1.Node, toAddLabels, toDelLabels map[string]string)
func SyncNodeTaints(node *v1.Node, toAddTaints, toDelTaints []string)
func UpdateClusterRoleBindingFromYaml(k8sClient *kubernetes.Clientset, clusterRoleBindingYaml string) error
func UpdateClusterRoleFromYaml(k8sClient *kubernetes.Clientset, clusterRoleYaml string) error
func UpdateConfigMap(k8sClient *kubernetes.Clientset, configYaml []byte, configMapName string) (bool, error)
func UpdatePodSecurityPolicyFromYaml(k8sClient *kubernetes.Clientset, pspYaml string) error
func UpdateRoleBindingFromYaml(k8sClient *kubernetes.Clientset, roleBindingYaml, namespace string) error
func UpdateRoleFromYaml(k8sClient *kubernetes.Clientset, roleYaml, namespace string) error
func UpdateSecret(k8sClient *kubernetes.Clientset, secret *v1.Secret) error
func UpdateServiceAccountFromYaml(k8sClient *kubernetes.Clientset, serviceAccountYaml string) error
type JobStatus
- func GetK8sJobStatus(k8sClient *kubernetes.Clientset, name, namespace string) (JobStatus, error)

Constants ¶

View Source

const (
	UserAddonResourceName         = "rke-user-addon"
	UserAddonsIncludeResourceName = "rke-user-includes-addons"
)

View Source

const (
	DefaultRetries          = 5
	DefaultSleepSeconds     = 5
	DefaultTimeout          = 45
	K8sWrapTransportTimeout = 30
)

View Source

const (
	HostnameLabel                = "kubernetes.io/hostname"
	InternalAddressAnnotation    = "rke.cattle.io/internal-ip"
	ExternalAddressAnnotation    = "rke.cattle.io/external-ip"
	AWSCloudProvider             = "aws"
	ExternalAWSCloudProviderName = "external-aws"
	MaxRetries                   = 5
	RetryInterval                = 5
)

Variables ¶

This section is empty.

Functions ¶

func ApplyK8sSystemJob ¶

func ApplyK8sSystemJob(jobYaml, kubeConfigPath string, k8sWrapTransport transport.WrapperFunc, timeout int, resourceName string, addonUpdated bool) error

func CordonUncordon ¶

func CordonUncordon(k8sClient *kubernetes.Clientset, nodeName string, nodeAddress string, cloudProviderName string, cordoned bool) error

func DecodeYamlResource ¶ added in v1.0.0

func DecodeYamlResource(resource interface{}, yamlManifest string) error

func DeleteConfigMap ¶ added in v0.2.0

func DeleteConfigMap(k8sClient *kubernetes.Clientset, configMapName string) error

func DeleteDeploymentIfExists ¶ added in v1.2.4

func DeleteDeploymentIfExists(ctx context.Context, k8sClient *kubernetes.Clientset, name, namespace string) error

func DeleteK8sJobIfExists ¶ added in v1.2.12

func DeleteK8sJobIfExists(k8sClient *kubernetes.Clientset, name, namespace string) error

func DeleteK8sSystemJob ¶ added in v0.1.9

func DeleteK8sSystemJob(jobYaml string, k8sClient *kubernetes.Clientset, timeout int) error

func DeleteNode ¶

func DeleteNode(k8sClient *kubernetes.Clientset, nodeName string, nodeAddress string, cloudProviderName string) error

func DeletePods ¶ added in v0.2.0

func DeletePods(k8sClient *kubernetes.Clientset, podList *v1.PodList) error

func DeleteServiceIfExists ¶ added in v1.2.4

func DeleteServiceIfExists(ctx context.Context, k8sClient *kubernetes.Clientset, name, namespace string) error

func GetConfigMap ¶

func GetConfigMap(k8sClient *kubernetes.Clientset, configMapName string) (*v1.ConfigMap, error)

func GetNode ¶

func GetNode(k8sClient *kubernetes.Clientset, nodeName, nodeAddress, cloudProviderName string) (*v1.Node, error)

func GetNodeList ¶

func GetNodeList(k8sClient *kubernetes.Clientset) (*v1.NodeList, error)

func GetSecret ¶

func GetSecret(k8sClient *kubernetes.Clientset, secretName, namespace string) (*v1.Secret, error)

func GetSecretsList ¶ added in v1.0.0

func GetSecretsList(k8sClient *kubernetes.Clientset, namespace string) (*v1.SecretList, error)

func GetSystemSecret ¶ added in v1.0.0

func GetSystemSecret(k8sClient *kubernetes.Clientset, secretName string) (*v1.Secret, error)

func IsNodeReady ¶

func IsNodeReady(node v1.Node) bool

func ListPodsByLabel ¶ added in v0.2.0

func ListPodsByLabel(k8sClient *kubernetes.Clientset, label string) (*v1.PodList, error)

func NewClient ¶

func NewClient(kubeConfigPath string, k8sWrapTransport transport.WrapperFunc) (*kubernetes.Clientset, error)

func SetNodeAddressesAnnotations ¶ added in v0.2.0

func SetNodeAddressesAnnotations(node *v1.Node, internalAddress, externalAddress string)

func SyncNodeLabels ¶ added in v0.2.0

func SyncNodeLabels(node *v1.Node, toAddLabels, toDelLabels map[string]string)

func SyncNodeTaints ¶ added in v0.2.0

func SyncNodeTaints(node *v1.Node, toAddTaints, toDelTaints []string)

func UpdateClusterRoleBindingFromYaml ¶

func UpdateClusterRoleBindingFromYaml(k8sClient *kubernetes.Clientset, clusterRoleBindingYaml string) error

func UpdateClusterRoleFromYaml ¶

func UpdateClusterRoleFromYaml(k8sClient *kubernetes.Clientset, clusterRoleYaml string) error

func UpdateConfigMap ¶

func UpdateConfigMap(k8sClient *kubernetes.Clientset, configYaml []byte, configMapName string) (bool, error)

func UpdatePodSecurityPolicyFromYaml ¶

func UpdatePodSecurityPolicyFromYaml(k8sClient *kubernetes.Clientset, pspYaml string) error

func UpdateRoleBindingFromYaml ¶

func UpdateRoleBindingFromYaml(k8sClient *kubernetes.Clientset, roleBindingYaml, namespace string) error

func UpdateRoleFromYaml ¶

func UpdateRoleFromYaml(k8sClient *kubernetes.Clientset, roleYaml, namespace string) error

func UpdateSecret ¶

func UpdateSecret(k8sClient *kubernetes.Clientset, secret *v1.Secret) error

func UpdateServiceAccountFromYaml ¶

func UpdateServiceAccountFromYaml(k8sClient *kubernetes.Clientset, serviceAccountYaml string) error

Types ¶

type JobStatus ¶ added in v0.1.8

type JobStatus struct {
	Completed bool
	Created   bool
	Removing  bool
}

func GetK8sJobStatus ¶ added in v0.1.9

func GetK8sJobStatus(k8sClient *kubernetes.Clientset, name, namespace string) (JobStatus, error)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL