broker

Documentation

Overview

SPDX-License-Identifier: Apache-2.0

Copyright Contributors to the Submariner project.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Index

• Constants
• func CreateGlobalnetConfigMap(config *rest.Config, globalnetEnabled bool, defaultGlobalCidrRange string, ...) error
• func CreateNewBrokerNamespace(clientset *kubernetes.Clientset) (brokernamespace *v1.Namespace, err error)
• func CreateNewBrokerRoleBinding(clientset *kubernetes.Clientset, serviceAccount, role string) (brokerRoleBinding *rbac.RoleBinding, err error)
• func CreateNewBrokerSA(clientset *kubernetes.Clientset, submarinerBrokerSA string) (brokerSA *v1.ServiceAccount, err error)
• func CreateOrUpdateBrokerAdminRole(clientset *kubernetes.Clientset) (created bool, err error)
• func CreateOrUpdateClusterBrokerRole(clientset *kubernetes.Clientset) (created bool, err error)
• func CreateSAForCluster(clientset *kubernetes.Clientset, clusterID string) (*v1.Secret, error)
• func Ensure(config *rest.Config, componentArr []string, crds bool) error
• func GetClientTokenSecret(clientSet clientset.Interface, brokerNamespace, submarinerBrokerSA string) (*v1.Secret, error)
• func GetGlobalnetConfigMap(k8sClientset *kubernetes.Clientset, namespace string) (*v1.ConfigMap, error)
• func NewBrokerAdminRole() *rbacv1.Role
• func NewBrokerClusterRole() *rbacv1.Role
• func NewBrokerNamespace() *v1.Namespace
• func NewBrokerRoleBinding(serviceAccount, role string) *rbacv1.RoleBinding
• func NewBrokerSA(submarinerBrokerSA string) *v1.ServiceAccount
• func NewGlobalnetConfigMap(globalnetEnabled bool, defaultGlobalCidrRange string, ...) (*v1.ConfigMap, error)
• func UpdateGlobalnetConfigMap(k8sClientset *kubernetes.Clientset, namespace string, configMap *v1.ConfigMap, ...) error
• func WaitForClientToken(clientset *kubernetes.Clientset, submarinerBrokerSA string) (secret *v1.Secret, err error)
• type ClusterInfo

Constants

const (
	GlobalCIDRConfigMapName = "submariner-globalnet-info"
	GlobalnetStatusKey      = "globalnetEnabled"
	ClusterInfoKey          = "clusterinfo"
	GlobalnetCidrRange      = "globalnetCidrRange"
	GlobalnetClusterSize    = "globalnetClusterSize"
)

const MaxGeneratedNameLength = 63 - 5

MaxGeneratedNameLength is the maximum generated length for a token, excluding the random suffix See k8s.io/apiserver/pkg/storage/names

const (
	SubmarinerBrokerAdminSA = "submariner-k8s-broker-admin"
)

const (
	SubmarinerBrokerNamespace = "submariner-k8s-broker"
)

Functions

func CreateGlobalnetConfigMap

func CreateGlobalnetConfigMap(config *rest.Config, globalnetEnabled bool, defaultGlobalCidrRange string,
	defaultGlobalClusterSize uint, namespace string) error

func CreateNewBrokerNamespace

func CreateNewBrokerNamespace(clientset *kubernetes.Clientset) (brokernamespace *v1.Namespace, err error)

func CreateNewBrokerRoleBinding

func CreateNewBrokerRoleBinding(clientset *kubernetes.Clientset, serviceAccount, role string) (brokerRoleBinding *rbac.RoleBinding,
	err error)

func CreateNewBrokerSA

func CreateNewBrokerSA(clientset *kubernetes.Clientset, submarinerBrokerSA string) (brokerSA *v1.ServiceAccount, err error)

func CreateOrUpdateBrokerAdminRole

func CreateOrUpdateBrokerAdminRole(clientset *kubernetes.Clientset) (created bool, err error)

func CreateOrUpdateClusterBrokerRole

func CreateOrUpdateClusterBrokerRole(clientset *kubernetes.Clientset) (created bool, err error)

func CreateSAForCluster

func CreateSAForCluster(clientset *kubernetes.Clientset, clusterID string) (*v1.Secret, error)

CreateSAForCluster creates a new SA, and binds it to the submariner cluster role

func Ensure

func Ensure(config *rest.Config, componentArr []string, crds bool) error

func GetClientTokenSecret

func GetClientTokenSecret(clientSet clientset.Interface, brokerNamespace, submarinerBrokerSA string) (*v1.Secret, error)

func GetGlobalnetConfigMap

func GetGlobalnetConfigMap(k8sClientset *kubernetes.Clientset, namespace string) (*v1.ConfigMap, error)

func NewBrokerAdminRole

func NewBrokerAdminRole() *rbacv1.Role

Create a role to bind to Broker SA

func NewBrokerClusterRole

func NewBrokerClusterRole() *rbacv1.Role

Create a role for each Cluster SAs to bind to

func NewBrokerNamespace

func NewBrokerNamespace() *v1.Namespace

func NewBrokerRoleBinding

func NewBrokerRoleBinding(serviceAccount, role string) *rbacv1.RoleBinding

Create a role for to bind the cluster admin (subctl) SA

func NewBrokerSA

func NewBrokerSA(submarinerBrokerSA string) *v1.ServiceAccount

func NewGlobalnetConfigMap

func NewGlobalnetConfigMap(globalnetEnabled bool, defaultGlobalCidrRange string,
	defaultGlobalClusterSize uint, namespace string) (*v1.ConfigMap, error)

func UpdateGlobalnetConfigMap

func UpdateGlobalnetConfigMap(k8sClientset *kubernetes.Clientset, namespace string,
	configMap *v1.ConfigMap, newCluster ClusterInfo) error

func WaitForClientToken

func WaitForClientToken(clientset *kubernetes.Clientset, submarinerBrokerSA string) (secret *v1.Secret, err error)

Types

type ClusterInfo

type ClusterInfo struct {
	ClusterID  string   `json:"cluster_id"`
	GlobalCidr []string `json:"global_cidr"`
}