gatekeeper

Documentation

Index

• func AuditDeploymentReconciler(registryWithOverwrite registry.ImageRewriter, ...) reconciling.NamedDeploymentReconcilerFactory
• func CRDReconciler(crd apiextensionsv1.CustomResourceDefinition) reconciling.NamedCustomResourceDefinitionReconcilerFactory
• func CRDs() ([]apiextensionsv1.CustomResourceDefinition, error)
• func ClusterRoleBindingReconciler() reconciling.NamedClusterRoleBindingReconcilerFactory
• func ClusterRoleReconciler() reconciling.NamedClusterRoleReconcilerFactory
• func ControllerDeploymentReconciler(enableMutation bool, imageRewriter registry.ImageRewriter, ...) reconciling.NamedDeploymentReconcilerFactory
• func GetResourcesToRemoveOnDelete() ([]ctrlruntimeclient.Object, error)
• func KubeSystemLabeler() (string, reconciling.NamespaceReconciler)
• func MutatingWebhookConfigurationReconciler(timeout int) reconciling.NamedMutatingWebhookConfigurationReconcilerFactory
• func NamespaceReconciler() (string, reconciling.NamespaceReconciler)
• func PodDisruptionBudgetReconciler() reconciling.NamedPodDisruptionBudgetReconcilerFactory
• func RoleBindingReconciler() reconciling.NamedRoleBindingReconcilerFactory
• func RoleReconciler() reconciling.NamedRoleReconcilerFactory
• func SecretReconciler() reconciling.NamedSecretReconcilerFactory
• func ServiceAccountReconciler() reconciling.NamedServiceAccountReconcilerFactory
• func ServiceReconciler() reconciling.NamedServiceReconcilerFactory
• func ValidatingWebhookConfigurationReconciler(timeout int) reconciling.NamedValidatingWebhookConfigurationReconcilerFactory

Functions

func AuditDeploymentReconciler

func AuditDeploymentReconciler(registryWithOverwrite registry.ImageRewriter, resourceOverride *corev1.ResourceRequirements) reconciling.NamedDeploymentReconcilerFactory

AuditDeploymentReconciler returns the function to create and update the Gatekeeper audit deployment.

func CRDReconciler

func CRDReconciler(crd apiextensionsv1.CustomResourceDefinition) reconciling.NamedCustomResourceDefinitionReconcilerFactory

CRDReconciler returns a reconciler for a CRD.

func CRDs

func CRDs() ([]apiextensionsv1.CustomResourceDefinition, error)

CRDs returns a list of CRDs.

func ClusterRoleBindingReconciler

func ClusterRoleBindingReconciler() reconciling.NamedClusterRoleBindingReconcilerFactory

ClusterRoleBindingReconciler creates the gatekeeper ClusterRoleBinding.

func ClusterRoleReconciler

func ClusterRoleReconciler() reconciling.NamedClusterRoleReconcilerFactory

ClusterRoleReconciler creates the gatekeeper ClusterRole.

func ControllerDeploymentReconciler

func ControllerDeploymentReconciler(enableMutation bool, imageRewriter registry.ImageRewriter, resourceOverride *corev1.ResourceRequirements) reconciling.NamedDeploymentReconcilerFactory

ControllerDeploymentReconciler returns the function to create and update the Gatekeeper controller deployment.

func GetResourcesToRemoveOnDelete

func GetResourcesToRemoveOnDelete() ([]ctrlruntimeclient.Object, error)

func KubeSystemLabeler

func KubeSystemLabeler() (string, reconciling.NamespaceReconciler)

KubeSystemLabeler labels the kube-system namespace to be exempt from Gatekeeper.

func MutatingWebhookConfigurationReconciler

func MutatingWebhookConfigurationReconciler(timeout int) reconciling.NamedMutatingWebhookConfigurationReconcilerFactory

func NamespaceReconciler

func NamespaceReconciler() (string, reconciling.NamespaceReconciler)

NamespaceReconciler creates the namespace for Gatekeeper.

func PodDisruptionBudgetReconciler

func PodDisruptionBudgetReconciler() reconciling.NamedPodDisruptionBudgetReconcilerFactory

func RoleBindingReconciler

func RoleBindingReconciler() reconciling.NamedRoleBindingReconcilerFactory

RoleBindingReconciler creates the gatekeeper RoleBinding.

func RoleReconciler

func RoleReconciler() reconciling.NamedRoleReconcilerFactory

RoleReconciler creates the gatekeeper Role.

func SecretReconciler

func SecretReconciler() reconciling.NamedSecretReconcilerFactory

SecretReconciler creates the secret for gatekeeper webhook controller.

func ServiceAccountReconciler

func ServiceAccountReconciler() reconciling.NamedServiceAccountReconcilerFactory

ServiceAccountReconciler returns a func to create/update the ServiceAccount used by gatekeeper.

func ServiceReconciler

func ServiceReconciler() reconciling.NamedServiceReconcilerFactory

ServiceReconciler returns the function to reconcile the gatekeeper service.

func ValidatingWebhookConfigurationReconciler

func ValidatingWebhookConfigurationReconciler(timeout int) reconciling.NamedValidatingWebhookConfigurationReconcilerFactory

ValidatingWebhookConfigurationReconciler returns the ValidatingwebhookConfiguration for gatekeeper.