linseed

Documentation

Index

• Constants
• func Linseed(c *Config) render.Component
• func LinseedNamespace(tenant *operatorv1.Tenant) string
• type Config

Constants

const (
	DeploymentName                                  = "tigera-linseed"
	ServiceAccountName                              = "tigera-linseed"
	PodSecurityPolicyName                           = "tigera-linseed"
	PolicyName                                      = networkpolicy.TigeraComponentPolicyPrefix + "linseed-access"
	PortName                                        = "tigera-linseed"
	TargetPort                                      = 8444
	Port                                            = 443
	ClusterRoleName                                 = "tigera-linseed"
	MultiTenantManagedClustersAccessClusterRoleName = "tigera-linseed-managed-cluster-access"
)

Functions

func Linseed

func Linseed(c *Config) render.Component

func LinseedNamespace

func LinseedNamespace(tenant *operatorv1.Tenant) string

LinseedNamespace determine the namespace in which Linseed is running. For management and standalone clusters, this is always the tigera-elasticsearch namespace. For multi-tenant management clusters, this is the tenant namespace

Types

type Config

type Config struct {
	// CustomResources provided by the user.
	Installation *operatorv1.InstallationSpec

	// Pull secrets provided by the user.
	PullSecrets []*corev1.Secret

	// Keypair to use for asserting Linseed's identity.
	KeyPair certificatemanagement.KeyPairInterface

	// Keypair to use for signing tokens.
	TokenKeyPair certificatemanagement.KeyPairInterface

	// Trusted bundle to use when validating client certificates.
	TrustedBundle certificatemanagement.TrustedBundleRO

	// ClusterDomain to use when building service URLs.
	ClusterDomain string

	// Whether this is a management cluster
	ManagementCluster bool

	// Whether the cluster supports pod security policies.
	UsePSP bool

	// Elastic cluster configuration
	ESClusterConfig *relasticsearch.ClusterConfig

	// Indicates whether DPI is installed in the cluster or not
	HasDPIResource bool

	// Namespace to install into.
	Namespace string

	// Namespaces to which we must bind the Linseed cluster role.
	BindNamespaces []string

	// Tenant configuration, if running for a particular tenant.
	Tenant          *operatorv1.Tenant
	ExternalElastic bool

	// Secret containing client certificate and key for connecting to the Elastic cluster. If configured,
	// mTLS is used between Linseed and the external Elastic cluster.
	ElasticClientSecret *corev1.Secret

	// Secret containing the user linseed connects to Elasticsearch
	// In a zero tenant setup, es-kubecontrollers create this secret
	// In a multi-tenant setup, users controllers create this secret
	ElasticClientCredentialsSecret *corev1.Secret

	ElasticHost string
	ElasticPort string

	LogStorage *operatorv1.LogStorage
}

Config contains all the information needed to render the Linseed component.