podidentityassociation

Jun 3, 2024

Changes in this version

+ func MakeAddonPodIdentityStackName(clusterName, addonName, serviceAccountName string) string

+ type AddonMigrator struct

+ AddonServiceAccountRoleMapper AddonServiceAccountRoleMapper

+ ClusterName string

+ EKSAddonsAPI EKSAddonsAPI

+ IAMRoleGetter IAMRoleGetter

+ RoleMigrator RoleMigrator

+ StackDescriber StackDescriber

+ func (a *AddonMigrator) Migrate(ctx context.Context) (*tasks.TaskTree, error)

+ type AddonServiceAccountRoleMapper map[string]*ekstypes.Addon

+ func CreateAddonServiceAccountRoleMapper(ctx context.Context, clusterName string, eksAddonsAPI EKSAddonsAPI) (AddonServiceAccountRoleMapper, error)

+ func (m AddonServiceAccountRoleMapper) AddonForServiceAccountRole(roleARN string) *ekstypes.Addon

+ type EKSAddonsAPI interface

+ DescribeAddon func(ctx context.Context, params *eks.DescribeAddonInput, ...) (*eks.DescribeAddonOutput, error)

+ DescribeAddonConfiguration func(ctx context.Context, params *eks.DescribeAddonConfigurationInput, ...) (*eks.DescribeAddonConfigurationOutput, error)

+ ListAddons func(ctx context.Context, params *eks.ListAddonsInput, optFns ...func(*eks.Options)) (*eks.ListAddonsOutput, error)

+ UpdateAddon func(ctx context.Context, params *eks.UpdateAddonInput, ...) (*eks.UpdateAddonOutput, error)

+ type IAMRoleCreator struct

+ ClusterName string

+ StackCreator StackCreator

+ func (r *IAMRoleCreator) Create(ctx context.Context, podIdentityAssociation *api.PodIdentityAssociation, ...) (string, error)

+ type IAMRoleGetter interface

+ GetRole func(ctx context.Context, params *iam.GetRoleInput, optFns ...func(*iam.Options)) (*iam.GetRoleOutput, error)

+ type IAMRoleUpdater struct

+ StackUpdater StackUpdater

+ func (u *IAMRoleUpdater) Update(ctx context.Context, podIdentityAssociation api.PodIdentityAssociation, ...) (string, bool, error)

+ type RoleMigrator interface

+ UpdateTrustPolicyForOwnedRoleTask func(ctx context.Context, roleName, serviceAccountName string, ...) tasks.Task

+ UpdateTrustPolicyForUnownedRoleTask func(ctx context.Context, roleName string, removeOIDCProviderTrustRelationship bool) tasks.Task

+ type RoleUpdateValidator struct

+ StackDescriber StackDescriber

+ func (r *RoleUpdateValidator) ValidateRoleUpdate(pia api.PodIdentityAssociation, association ekstypes.PodIdentityAssociation, ...) error

+ type StackDescriber interface

+ DescribeStack func(context.Context, *manager.Stack) (*manager.Stack, error)

type StackLister

+ GetStackTemplate func(ctx context.Context, stackName string) (string, error)

type Summary

+ OwnerARN string

+ type UpdateConfig struct

+ AssociationID string

+ HasIAMResourcesStack bool

+ PodIdentityAssociation api.PodIdentityAssociation

+ StackName string

Apr 26, 2024

Changes in this version

type Deleter

+ ClientSet kubeclient.Interface

Dec 8, 2023

Changes in this version

+ func IsPodIdentityAgentInstalled(ctx context.Context, eksAPI awsapi.EKS, clusterName string) (bool, error)

+ type AddonCreator interface

+ Create func(ctx context.Context, addon *api.Addon, waitTimeout time.Duration) error

+ type IRSAv1StackNameResolver map[string]IRSAv1StackSummary

+ func (r *IRSAv1StackNameResolver) GetStack(roleARN string) (IRSAv1StackSummary, bool)

+ func (r *IRSAv1StackNameResolver) Populate(getIAMServiceAccounts func() ([]*api.ClusterIAMServiceAccount, error)) error

+ type IRSAv1StackSummary struct

+ Capabilities []string

+ Name string

+ Tags map[string]string

type Identifier

+ func (i Identifier) IDString() string

+ func (i Identifier) NameString() string

+ type Migrator struct

+ func NewMigrator(clusterName string, eksAPI awsapi.EKS, iamAPI awsapi.IAM, ...) *Migrator

+ func (m *Migrator) MigrateToPodIdentity(ctx context.Context, options PodIdentityMigrationOptions) error

+ type PodIdentityMigrationOptions struct

+ Approve bool

+ RemoveOIDCProviderTrustRelationship bool

+ Timeout time.Duration

+ type StackCreator interface

+ CreateStack func(ctx context.Context, name string, stack builder.ResourceSetReader, ...) error

type StackLister

+ GetIAMServiceAccounts func(ctx context.Context) ([]*api.ClusterIAMServiceAccount, error)

+ ListPodIdentityStackNames func(ctx context.Context) ([]string, error)

Nov 27, 2023

Changes in this version

+ func MakeStackName(clusterName, namespace, serviceAccountName string) string

+ type APIDeleter interface

+ DeletePodIdentityAssociation func(ctx context.Context, params *eks.DeletePodIdentityAssociationInput, ...) (*eks.DeletePodIdentityAssociationOutput, error)

+ type APILister interface

+ ListPodIdentityAssociations func(ctx context.Context, params *eks.ListPodIdentityAssociationsInput, ...) (*eks.ListPodIdentityAssociationsOutput, error)

+ type APIUpdater interface

+ DescribePodIdentityAssociation func(ctx context.Context, params *eks.DescribePodIdentityAssociationInput, ...) (*eks.DescribePodIdentityAssociationOutput, error)

+ UpdatePodIdentityAssociation func(ctx context.Context, params *eks.UpdatePodIdentityAssociationInput, ...) (*eks.UpdatePodIdentityAssociationOutput, error)

+ type Creator struct

+ func NewCreator(clusterName string, stackManager StackManager, eksAPI awsapi.EKS) *Creator

+ func (c *Creator) CreatePodIdentityAssociations(ctx context.Context, podIdentityAssociations []api.PodIdentityAssociation) error

+ func (c *Creator) CreateTasks(ctx context.Context, podIdentityAssociations []api.PodIdentityAssociation) *tasks.TaskTree

+ type Deleter struct

+ APIDeleter APIDeleter

+ ClusterName string

+ StackDeleter StackDeleter

+ func NewDeleter(clusterName string, stackDeleter StackDeleter, apiDeleter APIDeleter) *Deleter

+ func (d *Deleter) Delete(ctx context.Context, podIDs []Identifier) error

+ func (d *Deleter) DeleteTasks(ctx context.Context, podIDs []Identifier) (*tasks.TaskTree, error)

+ type Getter struct

+ func NewGetter(clusterName string, eksAPI awsapi.EKS) *Getter

+ func (g *Getter) GetPodIdentityAssociations(ctx context.Context, namespace, serviceAccountName string) ([]Summary, error)

+ type Identifier struct

+ Namespace string

+ ServiceAccountName string

+ func ToIdentifiers(podIdentityAssociations []api.PodIdentityAssociation) []Identifier

+ type StackDeleter interface

+ DeleteStackBySpecSync func(ctx context.Context, stack *cfntypes.Stack, errCh chan error) error

+ type StackLister interface

+ DescribeStack func(ctx context.Context, stack *manager.Stack) (*manager.Stack, error)

+ ListStackNames func(ctx context.Context, regExp string) ([]string, error)

+ type StackManager interface

+ CreateStack func(ctx context.Context, name string, stack builder.ResourceSetReader, ...) error

+ type StackUpdater interface

+ MustUpdateStack func(ctx context.Context, options manager.UpdateStackOptions) error

+ type Summary struct

+ AssociationARN string

+ Namespace string

+ RoleARN string

+ ServiceAccountName string

+ type Updater struct

+ APIUpdater APIUpdater

+ ClusterName string

+ StackUpdater StackUpdater

+ func (u *Updater) Update(ctx context.Context, podIdentityAssociations []api.PodIdentityAssociation) error