cluster

Documentation

Index

• Constants
• func GetKubeAPIServerArg(cluster *v1.Cluster) map[string]string
• func GetRuntime(kubernetesVersion string) string
• func MachineSelectorFileExists(file rkev1.RKEProvisioningFiles, cluster *v1.Cluster) bool
• func MachineSelectorFileForPSA(secretName, mountPath string) rkev1.RKEProvisioningFiles
• type ManagementClusterMutator
  • func NewManagementClusterMutator(cache v3.PodSecurityAdmissionConfigurationTemplateCache) *ManagementClusterMutator
  • func (m *ManagementClusterMutator) Admit(request *admission.Request) (*admissionv1.AdmissionResponse, error)
  • func (m *ManagementClusterMutator) GVR() schema.GroupVersionResource
  • func (m *ManagementClusterMutator) MutatingWebhook(clientConfig admissionregistrationv1.WebhookClientConfig) *admissionregistrationv1.MutatingWebhook
  • func (m *ManagementClusterMutator) Operations() []admissionregistrationv1.OperationType
• type ProvisioningClusterMutator
  • func NewProvisioningClusterMutator(secret corecontroller.SecretController, ...) *ProvisioningClusterMutator
  • func (m *ProvisioningClusterMutator) Admit(request *admission.Request) (*admissionv1.AdmissionResponse, error)
  • func (m *ProvisioningClusterMutator) GVR() schema.GroupVersionResource
  • func (m *ProvisioningClusterMutator) MutatingWebhook(clientConfig admissionregistrationv1.WebhookClientConfig) *admissionregistrationv1.MutatingWebhook
  • func (m *ProvisioningClusterMutator) Operations() []admissionregistrationv1.OperationType

Constants

const (
	// KubeAPIAdmissionConfigOption is the option name in kube-apiserver for the admission control configuration file
	KubeAPIAdmissionConfigOption = "admission-control-config-file"
	// SecretName is the naming pattern of the secret which contains the admission control configuration file
	SecretName = "%s-admission-configuration-psact"
	// MountPath is where the admission control configuration file will be mounted in the control plane nodes
	MountPath = "/etc/rancher/%s/config/rancher-psact.yaml"
)

Functions

func GetKubeAPIServerArg

func GetKubeAPIServerArg(cluster *v1.Cluster) map[string]string

GetKubeAPIServerArg returns a map representation of the value of kube-apiserver-arg from the cluster's MachineGlobalConfig. An empty map is returned if kube-apiserver-arg is not set in the cluster.

func GetRuntime

func GetRuntime(kubernetesVersion string) string

GetRuntime returns the runtime of a cluster by checking its k8s version.

func MachineSelectorFileExists

func MachineSelectorFileExists(file rkev1.RKEProvisioningFiles, cluster *v1.Cluster) bool

MachineSelectorFileExists returns a boolean to indicate if the provided RKEProvisioningFiles exist in the provided cluster.

func MachineSelectorFileForPSA

func MachineSelectorFileForPSA(secretName, mountPath string) rkev1.RKEProvisioningFiles

MachineSelectorFileForPSA generates an RKEProvisioningFiles that mounts the secret which contains the generated admission configuration file to the control plane node

Types

type ManagementClusterMutator

type ManagementClusterMutator struct {
	// contains filtered or unexported fields
}

ManagementClusterMutator implements admission.MutatingAdmissionWebhook.

func NewManagementClusterMutator

func NewManagementClusterMutator(cache v3.PodSecurityAdmissionConfigurationTemplateCache) *ManagementClusterMutator

func (*ManagementClusterMutator) Admit

func (m *ManagementClusterMutator) Admit(request *admission.Request) (*admissionv1.AdmissionResponse, error)

Admit is the entrypoint for the mutator. Admit will return an error if it is unable to process the request.

func (*ManagementClusterMutator) GVR

func (m *ManagementClusterMutator) GVR() schema.GroupVersionResource

GVR returns the GroupVersionKind for this CRD.

func (*ManagementClusterMutator) MutatingWebhook

func (m *ManagementClusterMutator) MutatingWebhook(clientConfig admissionregistrationv1.WebhookClientConfig) *admissionregistrationv1.MutatingWebhook

MutatingWebhook returns the MutatingWebhook used for this CRD.

func (*ManagementClusterMutator) Operations

func (m *ManagementClusterMutator) Operations() []admissionregistrationv1.OperationType

Operations returns list of operations handled by this mutator.

type ProvisioningClusterMutator

type ProvisioningClusterMutator struct {
	// contains filtered or unexported fields
}

ProvisioningClusterMutator implements admission.MutatingAdmissionWebhook.

func NewProvisioningClusterMutator

func NewProvisioningClusterMutator(secret corecontroller.SecretController, psact v3.PodSecurityAdmissionConfigurationTemplateCache) *ProvisioningClusterMutator

NewProvisioningClusterMutator returns a new mutator for provisioning clusters

func (*ProvisioningClusterMutator) Admit

func (m *ProvisioningClusterMutator) Admit(request *admission.Request) (*admissionv1.AdmissionResponse, error)

Admit is the entrypoint for the mutator. Admit will return an error if it unable to process the request.

func (*ProvisioningClusterMutator) GVR

func (m *ProvisioningClusterMutator) GVR() schema.GroupVersionResource

GVR returns the GroupVersionKind for this CRD.

func (*ProvisioningClusterMutator) MutatingWebhook

func (m *ProvisioningClusterMutator) MutatingWebhook(clientConfig admissionregistrationv1.WebhookClientConfig) *admissionregistrationv1.MutatingWebhook

MutatingWebhook returns the MutatingWebhook used for this CRD.

func (*ProvisioningClusterMutator) Operations

func (m *ProvisioningClusterMutator) Operations() []admissionregistrationv1.OperationType

Operations returns list of operations handled by this mutator.