render

May 11, 2024

Changes in this version

+ const APIServerFinalizer

+ const BPFOperatorAnnotation

+ const BPFVolumeName

+ const CNIFinalizer

+ const InstallationControllerFinalizer

+ const MultiTenantComplianceManagedClustersAccessClusterRoleName

+ const OperatorCompleteFinalizer

type ComplianceConfiguration

+ Compliance *operatorv1.Compliance

+ ExternalElastic bool

+ Namespace string

+ Tenant *operatorv1.Tenant

type Component

+ func NewPassthroughWithLog(l logr.Logger, objs ...client.Object) Component

type DexComponentConfiguration

+ Authentication *operatorv1.Authentication

type GuardianConfiguration

+ ManagementClusterConnection *operatorv1.ManagementClusterConnection

type IntrusionDetectionConfiguration

+ BindNamespaces []string

+ ExternalElastic bool

+ Namespace string

+ Tenant *operatorv1.Tenant

type ManagerConfiguration

+ ComplianceNamespace string

+ Manager *operatorv1.Manager

+ VoltronRouteConfig *manager.VoltronRouteConfig

type NodeConfiguration

+ CanRemoveCNIFinalizer bool

+ IPPools []operatorv1.IPPool

type PacketCaptureApiConfiguration

+ PacketCaptureAPI *operatorv1.PacketCaptureAPI

type PolicyRecommendationConfiguration

+ PolicyRecommendation *operatorv1.PolicyRecommendation

Jan 31, 2024

Changes in this version

+ const PolicyRecommendationMultiTenantManagedClustersAccessClusterRoleName

+ const TyphaMetricsName

+ func KibanaEnabled(tenant *operatorv1.Tenant, installation *operatorv1.InstallationSpec) bool

+ func LinseedNamespace(tenant *operatorv1.Tenant) string

+ func ManagerService(tenant *operatorv1.Tenant) string

type FluentdConfiguration

+ ExternalElastic bool

type IntrusionDetectionConfiguration

+ ManagementCluster bool

type ManagerConfiguration

+ ExternalElastic bool

type PolicyRecommendationConfiguration

+ BindingNamespaces []string

+ ExternalElastic bool

Dec 2, 2023

Changes in this version

+ const APIServerSecretsRBACName

+ const ESCuratorName

+ const FluentdMetricsServiceWindows

+ const OIDCUsersESSecretName

+ const PacketCaptureServerCert

+ const TigeraLinseedSecretsClusterRole

+ const WindowsNodeMetricsService

+ const WindowsNodeObjectName

+ func DefaultWindowsCNIDirectories(installation operatorv1.InstallationSpec) (string, string, string)

type APIServerConfiguration

+ MultiTenant bool

type Component

+ func NewManagedClusterLogStorage(cfg *ManagedClusterLogStorageConfiguration) Component

type ElasticsearchConfiguration

+ KibanaEnabled bool

type FluentdConfiguration

+ Tenant *operatorv1.Tenant

+ type ManagedClusterLogStorageConfiguration struct

+ ClusterDomain string

+ Installation *operatorv1.InstallationSpec

+ Provider operatorv1.Provider

type ManagerConfiguration

+ BindingNamespaces []string

+ ClusterConfig *relasticsearch.ClusterConfig

+ Namespace string

+ Tenant *operatorv1.Tenant

+ TruthNamespace string

+ TunnelServerCert certificatemanagement.KeyPairInterface

type PolicyRecommendationConfiguration

+ Namespace string

+ Tenant *operatorv1.Tenant

+ type WindowsConfiguration struct

+ AmazonCloudIntegration *operatorv1.AmazonCloudIntegration

+ ClusterDomain string

+ Installation *operatorv1.InstallationSpec

+ K8sDNSServers []string

+ K8sServiceEp k8sapi.ServiceEndpoint

+ NodeReporterMetricsPort int

+ PrometheusServerTLS certificatemanagement.KeyPairInterface

+ TLS *TyphaNodeTLS

+ VXLANVNI int

Aug 31, 2023

Changes in this version

+ func ImagePullPolicy() corev1.PullPolicy

Mar 13, 2024

Changes in this version

+ const EKSLogForwarderName

+ const EKSLogForwarderTLSSecretName

type FluentdConfiguration

+ EKSLogForwarderKeyPair certificatemanagement.KeyPairInterface

Aug 4, 2023

Changes in this version

+ const AnomalyDetectorTLSSecretName

+ const AnomalyDetectorsName

+ const ElasticsearchLinseedUserSecret

+ const ElasticsearchObjectName

+ const KibanaObjectName

+ const PolicyRecommendationPodSecurityPolicyName

type IntrusionDetectionConfiguration

+ AnomalyDetectorCertSecret certificatemanagement.KeyPairInterface

type ManagerConfiguration

+ InternalTLSKeyPair certificatemanagement.KeyPairInterface

May 27, 2023

Changes in this version

+ const CalicoCNIPluginObjectName

+ const ComplianceBenchmarkerSecret

+ const ComplianceBenchmarkerServiceAccount

+ const ComplianceControllerSecret

+ const ComplianceControllerServiceAccount

+ const ComplianceReporterSecret

+ const ComplianceReporterServiceAccount

+ const ComplianceServerServiceAccount

+ const ComplianceSnapshotterSecret

+ const ComplianceSnapshotterServiceAccount

+ const DPITLSSecretName

+ const ElasticsearchPolicyRecommendationUserSecret

+ const IntrusionDetectionTLSSecretName

+ const LinseedServiceName

+ const LinseedTokenKey

+ const LinseedTokenPath

+ const LinseedTokenSecret

+ const LinseedTokenSubPath

+ const LinseedTokenVolumeName

+ const LinseedVolumeMountPath

+ const PolicyRecommendationName

+ const PolicyRecommendationNamespace

+ const PolicyRecommendationPolicyName

+ const PolicyRecommendationTLSSecretName

+ const TigeraLinseedSecret

+ const TigeraLinseedTokenSecret

+ const VoltronLinseedPublicCert

+ const VoltronLinseedTLS

+ var PolicyRecommendationEntityRule = networkpolicy.CreateSourceEntityRule(PolicyRecommendationNamespace, PolicyRecommendationName)

+ func APIServerServiceAccountName(v operatorv1.ProductVariant) string

+ func GetLinseedTokenPath(managedCluster bool) string

+ func ProjectCalicoAPIServerServiceName(v operatorv1.ProductVariant) string

+ func ProjectCalicoAPIServerTLSSecretName(v operatorv1.ProductVariant) string

type ComplianceConfiguration

+ BenchmarkerKeyPair certificatemanagement.KeyPairInterface

+ ControllerKeyPair certificatemanagement.KeyPairInterface

+ ReporterKeyPair certificatemanagement.KeyPairInterface

+ ServerKeyPair certificatemanagement.KeyPairInterface

+ SnapshotterKeyPair certificatemanagement.KeyPairInterface

type Component

+ func PolicyRecommendation(cfg *PolicyRecommendationConfiguration) Component

type FluentdConfiguration

+ FluentdKeyPair certificatemanagement.KeyPairInterface

type IntrusionDetectionConfiguration

+ IntrusionDetectionCertSecret certificatemanagement.KeyPairInterface

type ManagerConfiguration

+ VoltronLinseedKeyPair certificatemanagement.KeyPairInterface

+ type PolicyRecommendationConfiguration struct

+ ClusterDomain string

+ ESClusterConfig *relasticsearch.ClusterConfig

+ ESSecrets []*corev1.Secret

+ Installation *operatorv1.InstallationSpec

+ ManagedCluster bool

+ Openshift bool

+ PolicyRecommendationCertSecret certificatemanagement.KeyPairInterface

+ PullSecrets []*corev1.Secret

+ TrustedBundle certificatemanagement.TrustedBundle

+ UsePSP bool

Sep 5, 2023

Changes in this version

+ const DexPodSecurityPolicyName

type CSIConfiguration

+ OpenShift bool

type DexComponentConfiguration

+ UsePSP bool

Mar 17, 2023

Changes in this version

+ const ADAPIPodSecurityPolicyName

+ const PacketCapturePodSecurityPolicyName

type PacketCaptureApiConfiguration

+ UsePSP bool

Feb 15, 2023

Changes in this version

type AmazonCloudIntegrationConfiguration

+ TrustedBundle certificatemanagement.TrustedBundle

type Component

+ func NewDeletionPassthrough(objs ...client.Object) Component

Jan 13, 2023

Changes in this version

type DexComponentConfiguration

+ TrustedBundle certificatemanagement.TrustedBundle

Jan 29, 2023

Changes in this version

type APIServerConfiguration

+ TrustedBundle certificatemanagement.TrustedBundle

Nov 23, 2022

Changes in this version

+ const SysLogPublicCADir

+ const SysLogPublicCAPath

+ const SysLogPublicCertKey

+ const SyslogCAConfigMapName

type FluentdConfiguration

+ UseSyslogCertificate bool

Oct 22, 2022

Changes in this version

+ const GuardianPodSecurityPolicyName

type CSIConfiguration

+ Openshift bool

+ UsePSP bool

type GuardianConfiguration

+ UsePSP bool

Oct 19, 2022

Changes in this version

+ const ElasticsearchKeystoreEnvName

+ const ElasticsearchKeystoreHashAnnotation

+ const ElasticsearchKeystoreSecret

+ func CreateElasticsearchKeystoreSecret() *corev1.Secret

type ElasticsearchConfiguration

+ KeyStoreSecret *corev1.Secret

Aug 26, 2022

Changes in this version

+ const ADPersistentVolumeClaimName

+ const DefaultAnomalyDetectionPVRequestSizeGi

type IntrusionDetectionConfiguration

+ IntrusionDetection operatorv1.IntrusionDetection

+ ShouldRenderADPVC bool

Aug 18, 2022

Changes in this version

+ const ADAPIExpectedServiceName

+ const ADAPIPolicyName

+ const ADDetectorPolicyName

+ const ADLogTypeMetaDataResourceName

+ const APIServerPolicyName

+ const APIServerPort

+ const CSIContainerName

+ const CSIDaemonSetName

+ const CSIDaemonSetNamespace

+ const CSIDriverName

+ const CSIRegistrarContainerName

+ const CSITolerationControlPlaneKey

+ const CSITolerationMasterKey

+ const CSITolerationOperator

+ const ComplianceAccessPolicyName

+ const ComplianceBenchmarkerName

+ const ComplianceReporterName

+ const ComplianceServerPolicyName

+ const DexPolicyName

+ const ECKOperatorPolicyName

+ const ElasticsearchInternalPolicyName

+ const ElasticsearchInternalPort

+ const ElasticsearchPolicyName

+ const EsCuratorPolicyName

+ const FluentdMetricsPortName

+ const FluentdPolicyName

+ const GuardianPolicyName

+ const GuardianTargetPort

+ const IntrusionDetectionControllerPolicyName

+ const IntrusionDetectionInstallerPolicyName

+ const KibanaPolicyName

+ const KibanaPort

+ const ManagerDeploymentName

+ const ManagerPolicyName

+ const PSSBaseline

+ const PSSPrivileged

+ const PSSRestricted

+ const PacketCapturePolicyName

+ const PacketCapturePort

+ const QueryServerPort

+ const QueryserverNamespace

+ const QueryserverServiceName

+ const TigeraElasticsearchGatewaySecret

+ var ComplianceBenchmarkerSourceEntityRule = networkpolicy.CreateSourceEntityRule(ComplianceNamespace, ComplianceBenchmarkerName)

+ var ComplianceControllerSourceEntityRule = networkpolicy.CreateSourceEntityRule(ComplianceNamespace, ComplianceControllerName)

+ var ComplianceReporterSourceEntityRule = networkpolicy.CreateSourceEntityRule(ComplianceNamespace, ComplianceReporterName)

+ var ComplianceServerEntityRule = networkpolicy.CreateEntityRule(ComplianceNamespace, ComplianceServerName, complianceServerPort)

+ var ComplianceServerSourceEntityRule = networkpolicy.CreateSourceEntityRule(ComplianceNamespace, ComplianceServerName)

+ var ComplianceSnapshotterSourceEntityRule = networkpolicy.CreateSourceEntityRule(ComplianceNamespace, ComplianceSnapshotterName)

+ var DexEntityRule = networkpolicy.CreateEntityRule(DexNamespace, DexObjectName, DexPort)

+ var ECKOperatorSourceEntityRule = networkpolicy.CreateSourceEntityRule(ECKOperatorNamespace, ECKOperatorName)

+ var EKSLogForwarderEntityRule = networkpolicy.CreateSourceEntityRule(LogCollectorNamespace, eksLogForwarderName)

+ var ESCuratorSourceEntityRule = networkpolicy.CreateSourceEntityRule(ElasticsearchNamespace, EsCuratorName)

+ var ElasticsearchEntityRule = v3.EntityRule

+ var ElasticsearchSelector = fmt.Sprintf("elasticsearch.k8s.elastic.co/cluster-name == '%s'", ElasticsearchName)

+ var FluentdSourceEntityRule = v3.EntityRule

+ var GuardianEntityRule = networkpolicy.CreateEntityRule(GuardianNamespace, GuardianDeploymentName, GuardianTargetPort)

+ var GuardianServiceSelectorEntityRule = networkpolicy.CreateServiceSelectorEntityRule(GuardianNamespace, GuardianName)

+ var GuardianSourceEntityRule = networkpolicy.CreateSourceEntityRule(GuardianNamespace, GuardianDeploymentName)

+ var InternalElasticsearchEntityRule = v3.EntityRule

+ var IntrusionDetectionInstallerSourceEntityRule = v3.EntityRule

+ var IntrusionDetectionSourceEntityRule = v3.EntityRule

+ var KibanaEntityRule = networkpolicy.CreateEntityRule(KibanaNamespace, KibanaName, KibanaPort)

+ var KibanaSourceEntityRule = networkpolicy.CreateSourceEntityRule(KibanaNamespace, KibanaName)

+ var ManagerEntityRule = networkpolicy.CreateEntityRule(ManagerNamespace, ManagerDeploymentName, managerPort)

+ var ManagerSourceEntityRule = networkpolicy.CreateSourceEntityRule(ManagerNamespace, ManagerDeploymentName)

+ var PacketCaptureEntityRule = networkpolicy.CreateEntityRule(PacketCaptureNamespace, PacketCaptureDeploymentName, PacketCapturePort)

+ var PacketCaptureSourceEntityRule = networkpolicy.CreateSourceEntityRule(PacketCaptureNamespace, PacketCaptureDeploymentName)

+ var TigeraAPIServerEntityRule = v3.EntityRule

type APIServerConfiguration

+ UsePSP bool

+ type CSIConfiguration struct

+ Installation *operatorv1.InstallationSpec

+ Terminating bool

type ComplianceConfiguration

+ UsePSP bool

type Component

+ func APIServerPolicy(cfg *APIServerConfiguration) Component

+ func CSI(cfg *CSIConfiguration) Component

+ func GuardianPolicy(cfg *GuardianConfiguration) (Component, error)

+ func PacketCaptureAPIPolicy(cfg *PacketCaptureApiConfiguration) Component

type ElasticsearchConfiguration

+ ApplyTrial bool

+ ElasticsearchKeyPair certificatemanagement.KeyPairInterface

+ ElasticsearchUserSecret *corev1.Secret

+ KibanaKeyPair certificatemanagement.KeyPairInterface

+ TrustedBundle certificatemanagement.TrustedBundle

+ UnusedTLSSecret *corev1.Secret

+ UsePSP bool

type FluentdConfiguration

+ ManagedCluster bool

+ UsePSP bool

type GuardianConfiguration

+ TunnelCAType operatorv1.CAType

type IntrusionDetectionConfiguration

+ UsePSP bool

type ManagerConfiguration

+ UsePSP bool

type NodeConfiguration

+ UsePSP bool

type PacketCaptureApiConfiguration

+ ManagementClusterConnection *operatorv1.ManagementClusterConnection

+ type PodSecurityStandard string

type TyphaConfiguration

+ UsePSP bool

Jan 10, 2023

Changes in this version

+ const APIServerContainerName

+ const TigeraAPIServerQueryServerContainerName

+ const TyphaContainerName

type APIServerConfiguration

+ APIServer *operatorv1.APIServerSpec

Jun 24, 2022

Changes in this version

+ const ADAPIObjectName

+ const ADAPIObjectPortName

+ const ADAPITLSSecretName

+ const ADDetectorsModelResourceName

+ const ADResourceGroup

type IntrusionDetectionConfiguration

+ ADAPIServerCertSecret certificatemanagement.KeyPairInterface

May 10, 2022

Changes in this version

+ const ManagerClusterSettings

+ const ManagerClusterSettingsLayerTigera

+ const ManagerClusterSettingsViewDefault

type DexComponentConfiguration

+ TLSKeyPair certificatemanagement.KeyPairInterface

type DexConfig

+ RequiredVolumeMounts func() []corev1.VolumeMount

+ RequiredVolumes func() []corev1.Volume

type NodeConfiguration

+ BindMode string

+ FelixHealthPort int

type PacketCaptureApiConfiguration

+ TrustedBundle certificatemanagement.TrustedBundle

type TyphaConfiguration

+ FelixHealthPort int

Apr 2, 2022

Changes in this version

+ const ADJobPodTemplateBaseName

+ const CalicoNodeObjectName

+ const ComplianceServerSAName

+ const ElasticsearchDefaultPort

+ const FluentdNodeName

+ const IntrusionDetectionControllerName

+ const IntrusionDetectionName

+ const NodeFinalizer

+ func ApiServerServiceAccountName(v operatorv1.ProductVariant) string

+ func VoltronTunnelSecret() *corev1.Secret

type ComplianceConfiguration

+ TrustedBundle certificatemanagement.TrustedBundle

type FluentdConfiguration

+ MetricsServerTLS certificatemanagement.KeyPairInterface

type GuardianConfiguration

+ TrustedCertBundle certificatemanagement.TrustedBundle

type IntrusionDetectionConfiguration

+ TrustedCertBundle certificatemanagement.TrustedBundle

type ManagerConfiguration

+ ComplianceFeatureActive bool

+ TrustedCertBundle certificatemanagement.TrustedBundle

type NamespaceConfiguration

+ Terminating bool

type NodeConfiguration

+ Terminating bool

type TyphaNodeTLS

+ NodeCommonName string

+ NodeURISAN string

+ TrustedBundle certificatemanagement.TrustedBundle

+ TyphaCommonName string

+ TyphaURISAN string

+ type WindowsConfig struct

+ Installation *operatorv1.InstallationSpec

+ Terminating bool

Sep 21, 2022

Changes in this version

type ManagerConfiguration

+ Compliance *operatorv1.Compliance

+ ComplianceLicenseActive bool

Mar 3, 2022

Changes in this version

type ElasticsearchConfiguration

+ BaseURL string

Feb 17, 2022

Changes in this version

+ const CalicoNodeMetricsService

+ const FluentdMetricsPort

+ const FluentdMetricsService

+ const FluentdPrometheusTLSSecretHashAnnotation

+ const FluentdPrometheusTLSSecretName

+ const ManagerUserSettings

+ const NodePrometheusTLSServerAnnotation

+ const NodePrometheusTLSServerSecret

+ const PrometheusCABundle

+ const PrometheusCABundleAnnotation

+ func CertificateVolumeSource(certificateManagement *operatorv1.CertificateManagement, secretName string) corev1.VolumeSource

+ func CreateCertificateConfigMap(caPem string, secretName string, namespace string) *corev1.ConfigMap

type FluentdConfiguration

+ TLS *corev1.Secret

+ TrustedBundle *corev1.ConfigMap

type NodeConfiguration

+ PrometheusMetricsCABundle *corev1.ConfigMap

+ PrometheusServerTLS *corev1.Secret

Jan 30, 2022

Changes in this version

+ func ProjectCalicoApiServerServiceName(v operatorv1.ProductVariant) string

+ func ProjectCalicoApiServerTLSSecretName(v operatorv1.ProductVariant) string

+ type APIServerConfiguration struct

+ AmazonCloudIntegration *operatorv1.AmazonCloudIntegration

+ ClusterDomain string

+ ForceHostNetwork bool

+ Installation *operatorv1.InstallationSpec

+ K8SServiceEndpoint k8sapi.ServiceEndpoint

+ ManagementCluster *operatorv1.ManagementCluster

+ ManagementClusterConnection *operatorv1.ManagementClusterConnection

+ Openshift bool

+ PullSecrets []*corev1.Secret

+ TLSKeyPair *corev1.Secret

+ TunnelCASecret *corev1.Secret

+ type AWSSGSetupConfiguration struct

+ Installation *operatorv1.InstallationSpec

+ PullSecrets []corev1.LocalObjectReference

+ type AmazonCloudIntegrationConfiguration struct

+ AmazonCloudIntegration *operatorv1.AmazonCloudIntegration

+ Credentials *AmazonCredential

+ Installation *operatorv1.InstallationSpec

+ Openshift bool

+ PullSecrets []*corev1.Secret

+ type ComplianceConfiguration struct

+ ClusterDomain string

+ ComplianceServerCertSecret *corev1.Secret

+ ESClusterConfig *relasticsearch.ClusterConfig

+ ESSecrets []*corev1.Secret

+ HasNoLicense bool

+ Installation *operatorv1.InstallationSpec

+ KeyValidatorConfig authentication.KeyValidatorConfig

+ ManagementCluster *operatorv1.ManagementCluster

+ ManagementClusterConnection *operatorv1.ManagementClusterConnection

+ ManagerInternalTLSSecret *corev1.Secret

+ Openshift bool

+ PullSecrets []*corev1.Secret

+ type DexComponentConfiguration struct

+ ClusterDomain string

+ DeleteDex bool

+ DexConfig DexConfig

+ Installation *operatorv1.InstallationSpec

+ Openshift bool

+ PullSecrets []*corev1.Secret

+ type ElasticsearchConfiguration struct

+ ClusterConfig *relasticsearch.ClusterConfig

+ ClusterDomain string

+ CuratorSecrets []*corev1.Secret

+ DexCfg DexRelyingPartyConfig

+ ESService *corev1.Service

+ ElasticLicenseType ElasticsearchLicenseType

+ Elasticsearch *esv1.Elasticsearch

+ ElasticsearchSecrets []*corev1.Secret

+ Installation *operatorv1.InstallationSpec

+ KbService *corev1.Service

+ Kibana *kbv1.Kibana

+ KibanaCertSecret *corev1.Secret

+ KibanaInternalCertSecret *corev1.Secret

+ LogStorage *operatorv1.LogStorage

+ ManagementCluster *operatorv1.ManagementCluster

+ ManagementClusterConnection *operatorv1.ManagementClusterConnection

+ Provider operatorv1.Provider

+ PullSecrets []*corev1.Secret

+ type FluentdConfiguration struct

+ ClusterDomain string

+ EKSConfig *EksCloudwatchLogConfig

+ ESClusterConfig *relasticsearch.ClusterConfig

+ ESSecrets []*corev1.Secret

+ Filters *FluentdFilters

+ Installation *operatorv1.InstallationSpec

+ LogCollector *operatorv1.LogCollector

+ OSType rmeta.OSType

+ PullSecrets []*corev1.Secret

+ S3Credential *S3Credential

+ SplkCredential *SplunkCredential

+ type GuardianConfiguration struct

+ Installation *operatorv1.InstallationSpec

+ Openshift bool

+ PacketCaptureSecret *corev1.Secret

+ PrometheusCertSecret *corev1.Secret

+ PullSecrets []*corev1.Secret

+ TunnelSecret *corev1.Secret

+ URL string

+ type IntrusionDetectionConfiguration struct

+ ClusterDomain string

+ ESClusterConfig *relasticsearch.ClusterConfig

+ ESLicenseType ElasticsearchLicenseType

+ ESSecrets []*corev1.Secret

+ HasNoLicense bool

+ Installation *operatorv1.InstallationSpec

+ KibanaCertSecret *corev1.Secret

+ LogCollector *operatorv1.LogCollector

+ ManagedCluster bool

+ ManagerInternalTLSSecret *corev1.Secret

+ Openshift bool

+ PullSecrets []*corev1.Secret

+ type ManagerConfiguration struct

+ ClusterDomain string

+ ComplianceServerCertSecret *corev1.Secret

+ ESClusterConfig *relasticsearch.ClusterConfig

+ ESLicenseType ElasticsearchLicenseType

+ ESSecrets []*corev1.Secret

+ Installation *operatorv1.InstallationSpec

+ InternalTrafficSecret *corev1.Secret

+ KeyValidatorConfig authentication.KeyValidatorConfig

+ KibanaSecrets []*corev1.Secret

+ ManagementCluster *operatorv1.ManagementCluster

+ Openshift bool

+ PacketCaptureServerCertSecret *corev1.Secret

+ PrometheusCertSecret *corev1.Secret

+ PullSecrets []*corev1.Secret

+ Replicas *int32

+ TLSKeyPair *corev1.Secret

+ TunnelSecret *corev1.Secret

+ type NamespaceConfiguration struct

+ Installation *operatorv1.InstallationSpec

+ PullSecrets []*corev1.Secret

+ type PacketCaptureApiConfiguration struct

+ ClusterDomain string

+ Installation *operatorv1.InstallationSpec

+ KeyValidatorConfig authentication.KeyValidatorConfig

+ Openshift bool

+ PullSecrets []*corev1.Secret

+ ServerCertSecret *corev1.Secret

Dec 11, 2021

Changes in this version

+ const PrometheusTLSSecretName

Nov 8, 2021

Changes in this version

type Component

+ func Windows(cr *operatorv1.InstallationSpec) Component

Sep 24, 2021

Changes in this version

+ const ElasticsearchPerformanceHotspotsUserSecret

+ const NodeCertHashAnnotation

+ const TlsSecretHashAnnotation

+ const TyphaCAHashAnnotation

+ const TyphaCertHashAnnotation

+ var ClusterPriorityClassName = "system-cluster-critical"

+ var NodePriorityClassName = "system-node-critical"

+ func CSRClusterRoleBinding(name, namespace string) *rbacv1.ClusterRoleBinding

+ func CreateNamespace(name string, provider operatorv1.Provider) *corev1.Namespace

+ func SetClusterCriticalPod(t *corev1.PodTemplateSpec)

type Component

+ func NewPassthrough(objs []client.Object) Component

+ type NodeConfiguration struct

+ AmazonCloudIntegration *operatorv1.AmazonCloudIntegration

+ BGPLayouts *corev1.ConfigMap

+ BirdTemplates map[string]string

+ ClusterDomain string

+ Installation *operatorv1.InstallationSpec

+ K8sServiceEp k8sapi.ServiceEndpoint

+ LogCollector *operatorv1.LogCollector

+ MigrateNamespaces bool

+ NodeAppArmorProfile string

+ NodeReporterMetricsPort int

+ TLS *TyphaNodeTLS

+ type TyphaConfiguration struct

+ AmazonCloudIntegration *operatorv1.AmazonCloudIntegration

+ ClusterDomain string

+ Installation *operatorv1.InstallationSpec

+ K8sServiceEp k8sapi.ServiceEndpoint

+ MigrateNamespaces bool

+ TLS *TyphaNodeTLS

Aug 15, 2021

Changes in this version

+ const ESGatewayServiceName

+ const ElasticsearchKubeControllersSecureUserSecret

+ const ElasticsearchKubeControllersUserName

+ const ElasticsearchKubeControllersVerificationUserSecret

+ const FlowsDashboardName

+ const KibanaDefaultRoute

+ const KibanaInternalCertSecret

+ const PacketCaptureCertSecret

+ const PacketCaptureClusterRoleBindingName

+ const PacketCaptureClusterRoleName

+ const PacketCaptureContainerName

+ const PacketCaptureDeploymentName

+ const PacketCaptureName

+ const PacketCaptureNamespace

+ const PacketCaptureServiceAccountName

+ const PacketCaptureServiceName

+ const PacketCaptureTLSHashAnnotation

+ const PrometheusDefaultPort

+ const PrometheusHTTPAPIServiceName

+ const TigeraElasticsearchInternalCertSecret

+ const TigeraPrometheusAPIName

+ const TigeraPrometheusRole

+ const TigeraPrometheusRoleBinding

+ const TimeFilter

+ func CsrClusterRoleBinding(name, namespace string) *rbacv1.ClusterRoleBinding

type Component

+ func PacketCaptureAPI(pullSecrets []*corev1.Secret, openshift bool, ...) Component

+ func TigeraPrometheusAPI(cr *operator.InstallationSpec, pullSecrets []*corev1.Secret, ...) (Component, error)

Jul 3, 2021

Changes in this version

+ const CalicoNodeAlertmanager

+ const CalicoNodeMonitor

+ const CalicoNodePrometheus

+ const ElasticsearchMetrics

+ const FluentdMetrics

+ const MonitoringAPIVersion

+ const PacketCaptureAPIRole

+ const PacketCaptureAPIRoleBinding

+ const PacketCaptureServer

+ const TigeraPrometheusDPRate

type Component

+ func Monitor(installation *operatorv1.InstallationSpec, pullSecrets []*corev1.Secret) Component

May 15, 2021

Changes in this version

+ const BGPLayoutConfigMapKey

+ const BGPLayoutConfigMapName

+ const BGPLayoutPath

+ const BGPLayoutVolumeName

+ const CSRCMountPath

+ const DefaultGroupsClaim

+ const DexCNPattern

+ const DexCertSecretName

+ func CreateCertificateSecret(caPem []byte, secretName string, namespace string) *corev1.Secret

type DexConfig

+ CreateCertSecret func() *corev1.Secret

+ RedirectURIs func() []string

type DexKeyValidatorConfig

+ func (d DexKeyValidatorConfig) BaseURL() string

+ func (d DexKeyValidatorConfig) ClientID() string

+ func (d DexKeyValidatorConfig) ClientSecret() []byte

+ func (d DexKeyValidatorConfig) Issuer() string

+ func (d DexKeyValidatorConfig) RedirectURIs() []string

+ func (d DexKeyValidatorConfig) RequestedScopes() []string

+ func (d DexKeyValidatorConfig) RequiredConfigMaps(namespace string) []*corev1.ConfigMap

+ func (d DexKeyValidatorConfig) UsernameClaim() string

type DexRelyingPartyConfig

+ BaseURL func() string

Apr 30, 2021

Changes in this version

+ const K8sSvcEndpointConfigMapName

Apr 5, 2021

Changes in this version

+ const BindDNSecretField

+ const BindPWSecretField

+ const ElasticsearchAdminUserSecret

+ const ElasticsearchKubeControllersUserSecret

+ const ElasticsearchUserHashAnnotation

+ const LDAPSecretName

Feb 2, 2021

Changes in this version

+ const APIServiceName

+ const CSRClusterRoleName

+ const CSRInitContainerName

+ const CSRLabelCalicoSystem

+ const ComplianceServiceName

+ const DefaultElasticStorageGi

+ const ECKLicenseConfigMapName

+ const ElasticsearchADJobUserSecret

+ const ElasticsearchDefaultCertDirWindows

+ const ElasticsearchDefaultCertPathWindows

+ const ElasticsearchLicenseTypeBasic

+ const ElasticsearchLicenseTypeEnterprise

+ const ElasticsearchLicenseTypeEnterpriseTrial

+ const ElasticsearchLicenseTypeUnknown

+ const ElasticsearchOperatorUserSecret

+ const ElasticsearchTLSHashAnnotation

+ const EsKubeControllerRole

+ const EsKubeControllerRoleBinding

+ const EsManagerRole

+ const EsManagerRoleBinding

+ const KibanaTLSAnnotationHash

+ const KibanaTLSHashAnnotation

+ const ManagerServiceName

+ const OIDCUsersConfigMapName

+ const OIDCUsersEsSecreteName

+ const OSTypeWindows

+ const ProbePeriodSeconds

+ const ProbePeriodSecondsWindows

+ const ProbeTimeoutSecondsWindows

+ const TigeraOperatorCAIssuerPrefix

+ var FelixCommonName = "typha-client"

+ var TyphaCommonName = "typha-server"

+ func CreateCSRInitContainer(installation *operator.InstallationSpec, image string, mountName string, ...) corev1.Container

+ func ResolveCSRInitImage(inst *operator.InstallationSpec, is *operator.ImageSet) (string, error)

type Component

+ ResolveImages func(is *operator.ImageSet) error

+ type ElasticsearchLicenseType string

type GuardianComponent

+ func (c *GuardianComponent) ResolveImages(is *operatorv1.ImageSet) error

Nov 6, 2020

Changes in this version

+ const ClientIDSecretField

+ const ClientSecretSecretField

+ const DexCN

+ const DexClientId

+ const DexNamespace

+ const DexObjectName

+ const DexPort

+ const DexTLSSecretName

+ const ECKWebhookPortName

+ const OIDCSecretName

+ const OpenshiftSecretName

+ const RootCASecretField

+ func CreateDexClientSecret() *corev1.Secret

+ func CreateDexTLSSecret() *corev1.Secret

type Component

+ func Dex(pullSecrets []*corev1.Secret, openshift bool, installation *oprv1.Installation, ...) Component

+ type DexConfig interface

+ Connector func() map[string]interface{}

+ func NewDexConfig(authentication *oprv1.Authentication, tlsSecret *corev1.Secret, ...) DexConfig

+ type DexKeyValidatorConfig interface

+ ManagerURI func() string

+ RequiredAnnotations func() map[string]string

+ RequiredEnv func(prefix string) []corev1.EnvVar

+ RequiredSecrets func(namespace string) []*corev1.Secret

+ RequiredVolumeMounts func() []corev1.VolumeMount

+ RequiredVolumes func() []corev1.Volume

+ func NewDexKeyValidatorConfig(authentication *oprv1.Authentication, tlsSecret *corev1.Secret) DexKeyValidatorConfig

+ type DexRelyingPartyConfig interface

+ ClientSecret func() []byte

+ GroupsClaim func() string

+ JWKSURI func() string

+ RequestedScopes func() []string

+ TokenURI func() string

+ UserInfoURI func() string

+ UsernameClaim func() string

+ func NewDexRelyingPartyConfig(authentication *oprv1.Authentication, tlsSecret *corev1.Secret, ...) DexRelyingPartyConfig

Sep 30, 2020

Changes in this version

+ const OSTypeAny

+ const OSTypeLinux

type Component

+ SupportedOSType func() OSType

type GuardianComponent

+ func (c *GuardianComponent) SupportedOSType() OSType

+ type OSType string

Aug 7, 2020

Changes in this version

+ func Bool(b bool) *bool

+ func Int64(i int64) *int64

Aug 26, 2020

Changes in this version

+ type K8sServiceEndpoint struct

+ Host string

+ Port string

+ func (k8s K8sServiceEndpoint) EnvVars() []v1.EnvVar

Jul 29, 2020

Changes in this version

+ const ElasticsearchSecureSettingsSecretName

+ type OIDCAuthentication struct

+ AuthorizationEndpoint string

+ ClientID string

+ GroupPrefix string

+ GroupsClaim string

+ IssuerURL string

+ JWKSetURI string

+ RequestedScopes []string

+ Secret string

+ SiteURL string

+ TokenEndpoint string

+ UserInfoEndpoint string

+ UsernameClaim string

+ UsernamePrefix string

Jun 26, 2020

Changes in this version

+ const AmazonCloudCredentialKeyIdName

+ const AmazonCloudCredentialKeySecretName

+ const AmazonCloudIntegrationComponentName

+ const AmazonCloudIntegrationCredentialName

+ const AmazonCloudIntegrationNamespace

+ const ManagerInternalSecretCertName

+ const ManagerInternalSecretKeyName

+ const ManagerInternalTLSHashAnnotation

+ const ManagerInternalTLSSecretCertName

+ const ManagerInternalTLSSecretName

+ const VoltronTunnelSecretCertName

+ const VoltronTunnelSecretKeyName

+ func GetTigeraSecurityGroupEnvVariables(aci *operatorv1beta1.AmazonCloudIntegration) []corev1.EnvVar

+ type AmazonCredential struct

+ KeyId []byte

+ KeySecret []byte

+ func ConvertSecretToCredential(s *corev1.Secret) (*AmazonCredential, error)

type Component

+ func AmazonCloudIntegration(aci *operatorv1beta1.AmazonCloudIntegration, ...) (Component, error)

Jun 19, 2020

Changes in this version

+ func GetResourceRequirements(i *operatorv1.Installation, name operatorv1.ComponentName) v1.ResourceRequirements

May 12, 2020

Changes in this version

+ const EsCuratorServiceAccount

+ const ManagerClusterRole

+ const ManagerClusterRoleBinding

+ const ManagerServiceAccount

+ const ManagerServiceDNS

+ const ManagerServiceIP

+ const ManagerTLSHashAnnotation

+ const ManagerTLSSecretCertName

+ const PriorityClassName

+ const ProbeTimeoutSeconds

type ElasticsearchClusterConfig

+ func (c ElasticsearchClusterConfig) FlowShards() int

Mar 27, 2020

Changes in this version

+ const ComplianceControllerName

+ const ComplianceServerName

+ const ComplianceSnapshotterName

+ const ECKEnterpriseTrial

+ const ECKWebhookConfiguration

+ const ECKWebhookName

+ const KibanaServiceName

+ const LogStorageFinalizer

+ const SplunkFluentdCertificateSecretName

+ const SplunkFluentdDefaultCertDir

+ const SplunkFluentdDefaultCertPath

+ const SplunkFluentdSecretCertificateKey

+ const SplunkFluentdSecretTokenKey

+ const SplunkFluentdSecretsVolName

+ const SplunkFluentdTokenSecretName

+ func CopySecrets(ns string, oSecrets ...*v1.Secret) []*v1.Secret

+ func CreateOperatorTLSSecret(ca *crypto.CA, secretName string, secretKeyName string, secretCertName string, ...) (*v1.Secret, error)

type Component

+ func LogStorage(logStorage *operatorv1.LogStorage, installation *operatorv1.Installation, ...) Component

+ type SplunkCredential struct

+ Certificate []byte

+ Token []byte

Jul 31, 2020

Changes in this version

+ const ElasticsearchImageName

Feb 10, 2020

Changes in this version

+ const ComplianceServerCertName

+ const ComplianceServerCertSecret

+ const ComplianceServerKeyName

+ const DefaultCertificateDuration

+ const DefaultElasticsearchClusterName

+ const DefaultElasticsearchReplicas

+ const ElasticsearchComplianceBenchmarkerUserSecret

+ const ElasticsearchComplianceControllerUserSecret

+ const ElasticsearchComplianceReporterUserSecret

+ const ElasticsearchComplianceServerUserSecret

+ const ElasticsearchComplianceSnapshotterUserSecret

+ const ElasticsearchConfigMapName

+ const ElasticsearchCuratorUserSecret

+ const ElasticsearchEksLogForwarderUserSecret

+ const ElasticsearchIntrusionDetectionJobUserSecret

+ const ElasticsearchIntrusionDetectionUserSecret

+ const ElasticsearchLogCollectorUserSecret

+ const ElasticsearchManagerUserSecret

+ const ElasticsearchServiceName

+ const GuardianClusterRoleBindingName

+ const GuardianClusterRoleName

+ const GuardianDeploymentName

+ const GuardianImageName

+ const GuardianName

+ const GuardianNamespace

+ const GuardianSecretName

+ const GuardianServiceAccountName

+ const GuardianServiceName

+ const GuardianVolumeName

+ const IntrusionDetectionInstallerJobName

+ const VoltronDnsName

+ const VoltronKeySizeBits

+ const VoltronName

+ const VoltronTunnelSecretName

+ func GetIPv4Pool(cn *operator.CalicoNetworkSpec) *operator.IPPool

+ func GetIPv6Pool(cn *operator.CalicoNetworkSpec) *operator.IPPool

+ type Annotatable interface

+ GetAnnotations func() map[string]string

+ SetAnnotations func(map[string]string)

+ func ElasticsearchDecorateAnnotations(obj Annotatable, config *ElasticsearchClusterConfig, secrets []*corev1.Secret) Annotatable

type Component

+ func ElasticsearchManaged(clusterDNS string, provider operatorv1.Provider) Component

+ func Guardian(url string, pullSecrets []*corev1.Secret, openshift bool, registry string, ...) Component

+ type ElasticsearchClusterConfig struct

+ func NewElasticsearchClusterConfig(clusterName string, replicas int, shards int) *ElasticsearchClusterConfig

+ func NewElasticsearchClusterConfigFromConfigMap(configMap *corev1.ConfigMap) (*ElasticsearchClusterConfig, error)

+ func (c ElasticsearchClusterConfig) Annotation() string

+ func (c ElasticsearchClusterConfig) ClusterName() string

+ func (c ElasticsearchClusterConfig) ConfigMap() *corev1.ConfigMap

+ func (c ElasticsearchClusterConfig) Replicas() int

+ func (c ElasticsearchClusterConfig) Shards() int

+ type GuardianComponent struct

+ func (c *GuardianComponent) Objects() []runtime.Object

+ func (c *GuardianComponent) Ready() bool

Mar 2, 2020

Changes in this version

+ func ReplaceImagePath(image, imagepath string) string

Dec 12, 2019

Changes in this version

+ const KibanaBasePath

+ const ManagerOIDCConfig

+ const ManagerOIDCJwksURI

+ const ManagerOIDCWellknownURI

+ func ElasticsearchContainerDecorateIndexCreator(c corev1.Container, replicas, shards int) corev1.Container

Nov 7, 2019

Changes in this version

+ const AppLabelName

+ const BirdTemplatesConfigMapName

+ const CNICalico

+ const CNINone

+ const CalicoNamespace

+ const DefaultKibanaURL

+ const ECKElasticsearchImageName

+ const ECKOperatorImageName

+ const ECKOperatorName

+ const ECKOperatorNamespace

+ const ECKRegistry

+ const ECKWebhookSecretName

+ const EksLogForwarderAwsId

+ const EksLogForwarderAwsKey

+ const EksLogForwarderSecret

+ const ElasticsearchDefaultCertDir

+ const ElasticsearchDefaultCertPath

+ const ElasticsearchHTTPSEndpoint

+ const ElasticsearchHTTPURL

+ const ElasticsearchName

+ const ElasticsearchNamespace

+ const ElasticsearchPublicCertSecret

+ const ElasticsearchStorageClass

+ const ElasticsearchUserComplianceBenchmarker

+ const ElasticsearchUserComplianceController

+ const ElasticsearchUserComplianceReporter

+ const ElasticsearchUserComplianceServer

+ const ElasticsearchUserComplianceSnapshotter

+ const ElasticsearchUserCurator

+ const ElasticsearchUserEksLogForwarder

+ const ElasticsearchUserIntrusionDetection

+ const ElasticsearchUserIntrusionDetectionJob

+ const ElasticsearchUserLogCollector

+ const ElasticsearchUserManager

+ const EsCuratorImageName

+ const FluentdFilterConfigMapName

+ const FluentdFilterDNSName

+ const FluentdFilterFlowName

+ const FluentdImageName

+ const K8sGcrRegistry

+ const KibanaDefaultCertPath

+ const KibanaHTTPSEndpoint

+ const KibanaHTTPURL

+ const KibanaImageName

+ const KibanaName

+ const KibanaNamespace

+ const KibanaPublicCertSecret

+ const LogCollectorNamespace

+ const ManagerEsProxyImageName

+ const ManagerImageName

+ const ManagerProxyImageName

+ const ManagerTLSSecretName

+ const OperatorInitImageName

+ const S3FluentdSecretName

+ const S3KeyIdName

+ const S3KeySecretName

+ const TigeraAWSSGSetupName

+ const TigeraElasticsearchCertSecret

+ const TigeraKibanaCertSecret

+ const TigeraPrometheusNamespace

+ const TyphaDeploymentName

+ const TyphaImageNameCalico

+ const TyphaImageNameTigera

+ const TyphaK8sAppName

+ const TyphaPort

+ const TyphaPortName

+ const TyphaServiceAccountName

+ const TyphaServiceName

+ var CommonName = "common-name"

+ var EsCuratorName = "elastic-curator"

+ var NodeTLSSecretName = "node-certs"

+ var TLSSecretCertName = "cert.crt"

+ var TLSSecretKeyName = "key.key"

+ var TyphaCABundleName = "caBundle"

+ var TyphaCAConfigMapName = "typha-ca"

+ var TyphaTLSSecretName = "typha-certs"

+ var URISAN = "uri-san"

+ func AnnotationHash(i interface{}) string

+ func ElasticsearchContainerDecorate(c corev1.Container, cluster, secret string) corev1.Container

+ func ElasticsearchContainerDecorateENVVars(c corev1.Container, cluster, esUsername string) corev1.Container

+ func ElasticsearchContainerDecorateVolumeMounts(c corev1.Container) corev1.Container

+ func ElasticsearchDefaultVolume() corev1.Volume

+ func ElasticsearchDefaultVolumeMount() corev1.VolumeMount

+ func ElasticsearchPodSpecDecorate(p corev1.PodSpec) corev1.PodSpec

+ func OperatorNamespace() string

+ func ParseHostPort(hostport string) (string, string, error)

type Component

+ func AWSSecurityGroupSetup(ps []corev1.LocalObjectReference, r string) (Component, error)

+ func ConfigMaps(cms []*corev1.ConfigMap) Component

+ func ElasticCurator(logStorage operatorv1.LogStorage, esSecrets, pullSecrets []*corev1.Secret, ...) Component

+ func Elasticsearch(logStorage *operatorv1.LogStorage, esCertSecret *corev1.Secret, ...) (Component, error)

+ func ElasticsearchSecrets(updatedESUserSecrets []*corev1.Secret, esPublicCertSecret *corev1.Secret, ...) Component

+ func Fluentd(lc *operatorv1.LogCollector, ls *operatorv1.LogStorage, ...) Component

+ func Manager(cr *operator.Manager, esSecrets []*corev1.Secret, clusterName string, ...) (Component, error)

+ func Secrets(secrets []*corev1.Secret) Component

+ func Typha(cr *operator.Installation, p operator.Provider, tnTLS *TyphaNodeTLS) Component

+ type EksCloudwatchLogConfig struct

+ AwsId []byte

+ AwsKey []byte

+ AwsRegion string

+ FetchInterval string

+ GroupName string

+ StreamPrefix string

+ type FluentdFilters struct

+ DNS string

+ Flow string

+ type NetworkConfig struct

+ CNI string

+ IPPools []operatorv1.IPPool

+ NodenameFileOptional bool

+ type S3Credential struct

+ KeyId []byte

+ KeySecret []byte

+ type TyphaNodeTLS struct

+ CAConfigMap *corev1.ConfigMap

+ NodeSecret *corev1.Secret

+ TyphaSecret *corev1.Secret

Aug 30, 2019

Changes in this version

+ const APIServerImageName

+ const APIServerNamespace

+ const APIServerSecretCertName

+ const APIServerSecretKeyName

+ const APIServerTLSSecretName

+ const CNIImageName

+ const CalicoRegistry

+ const ComplianceBenchmarkerImage

+ const ComplianceControllerImage

+ const ComplianceNamespace

+ const ComplianceReporterImage

+ const ComplianceServerImage

+ const ComplianceSnapshotterImage

+ const ConsoleEsProxyImageName

+ const ConsoleManagerImageName

+ const ConsoleProxyImageName

+ const FlexVolumeImageName

+ const IntrusionDetectionControllerImageName

+ const IntrusionDetectionJobInstallerImageName

+ const IntrusionDetectionNamespace

+ const KubeControllersImageNameCalico

+ const KubeControllersImageNameTigera

+ const ManagerNamespace

+ const ManagerSecretCertName

+ const ManagerSecretKeyName

+ const ManagerTlsSecretName

+ const NodeImageNameCalico

+ const NodeImageNameTigera

+ const Optional

+ const QueryServerImageName

+ const TigeraRegistry

+ func KubeControllers(cr *operator.Installation) *kubeControllersComponent

+ func ParseEndpoint(endpoint string) (string, string, string, error)

+ func SetTestLogger(l logr.Logger)

+ type Component interface

+ Objects func() []runtime.Object

+ Ready func() bool

+ func APIServer(registry string, tlsKeyPair *corev1.Secret, pullSecrets []*corev1.Secret, ...) Component

+ func Compliance(registry string, m *operatorv1.MonitoringConfiguration, ...) Component

+ func Console(cr *operator.Console, monitoring *operator.MonitoringConfiguration, ...) Component

+ func CustomResourceDefinitions(cr *operator.Installation) Component

+ func IntrusionDetection(registry string, m *operatorv1.MonitoringConfiguration, ...) Component

+ func Namespaces(cr *operator.Installation, openshift bool, pullSecrets []*corev1.Secret) Component

+ func Node(cr *operator.Installation, openshift bool) Component

+ func PriorityClassDefinitions(cr *operator.Installation) Component

+ type Renderer interface

+ Render func() []Component

+ func Calico(cr *operator.Installation, pullSecrets []*corev1.Secret, openshift bool) Renderer