nodeportproxy

Documentation

Overview

Package nodeportproxy is responsible for reconciling a seed-cluster-wide proxy based on Envoy and a custom envoy-manager/lb-updater tools. They monitor Cluster resources and allocate a port on a shared LoadBalancer service to access the user cluster's control plane.

Note that there is also pkg/resources/nodeportproxy/, which is a special, per-Cluster nodeport-proxy. The package are similar, but not similar enough to merge them together.

Index

• Constants
• func ClusterRoleBindingName(cfg *kubermaticv1.KubermaticConfiguration) string
• func ClusterRoleBindingReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedClusterRoleBindingReconcilerFactory
• func ClusterRoleName(cfg *kubermaticv1.KubermaticConfiguration) string
• func ClusterRoleReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedClusterRoleReconcilerFactory
• func EnvoyDeploymentReconciler(cfg *kubermaticv1.KubermaticConfiguration, seed *kubermaticv1.Seed, ...) reconciling.NamedDeploymentReconcilerFactory
• func EnvoyPDBReconciler() reconciling.NamedPodDisruptionBudgetReconcilerFactory
• func RoleBindingReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedRoleBindingReconcilerFactory
• func RoleReconciler() reconciling.NamedRoleReconcilerFactory
• func ServiceAccountReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedServiceAccountReconcilerFactory
• func ServiceReconciler(seed *kubermaticv1.Seed) reconciling.NamedServiceReconcilerFactory
• func UpdaterDeploymentReconciler(cfg *kubermaticv1.KubermaticConfiguration, seed *kubermaticv1.Seed, ...) reconciling.NamedDeploymentReconcilerFactory

Constants

const (
	ServiceAccountName    = "nodeport-proxy"
	EnvoyDeploymentName   = "nodeport-proxy-envoy"
	UpdaterDeploymentName = "nodeport-proxy-updater"
	EnvoyPort             = 8002
	EnvoySNIPort          = 6443
	EnvoyTunnelingPort    = 8088
)

const (
	RoleName        = "nodeport-proxy"
	RoleBindingName = "nodeport-proxy"
)

const (
	// ServiceName is the name for the created service object.
	ServiceName = "nodeport-proxy"
)

Functions

func ClusterRoleBindingName

func ClusterRoleBindingName(cfg *kubermaticv1.KubermaticConfiguration) string

func ClusterRoleBindingReconciler

func ClusterRoleBindingReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedClusterRoleBindingReconcilerFactory

func ClusterRoleName

func ClusterRoleName(cfg *kubermaticv1.KubermaticConfiguration) string

func ClusterRoleReconciler

func ClusterRoleReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedClusterRoleReconcilerFactory

func EnvoyDeploymentReconciler

func EnvoyDeploymentReconciler(cfg *kubermaticv1.KubermaticConfiguration, seed *kubermaticv1.Seed, supportsFailureDomainZoneAntiAffinity bool, versions kubermatic.Versions) reconciling.NamedDeploymentReconcilerFactory

func EnvoyPDBReconciler

func EnvoyPDBReconciler() reconciling.NamedPodDisruptionBudgetReconcilerFactory

func RoleBindingReconciler

func RoleBindingReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedRoleBindingReconcilerFactory

func RoleReconciler

func RoleReconciler() reconciling.NamedRoleReconcilerFactory

func ServiceAccountReconciler

func ServiceAccountReconciler(cfg *kubermaticv1.KubermaticConfiguration) reconciling.NamedServiceAccountReconcilerFactory

func ServiceReconciler

func ServiceReconciler(seed *kubermaticv1.Seed) reconciling.NamedServiceReconcilerFactory

ServiceReconciler bootstraps the nodeport-proxy service object for a seed cluster resource.

func UpdaterDeploymentReconciler

func UpdaterDeploymentReconciler(cfg *kubermaticv1.KubermaticConfiguration, seed *kubermaticv1.Seed, versions kubermatic.Versions) reconciling.NamedDeploymentReconcilerFactory