app

Documentation

Overview

Package app makes it easy to create a kubelet server for various contexts.

Index

• func BuildAuth(nodeName types.NodeName, client clientset.Interface, ...) (server.AuthInterface, func(<-chan struct{}), error)
• func BuildAuthn(client authenticationclient.AuthenticationV1Interface, ...) (authenticator.Request, func(<-chan struct{}), error)
• func BuildAuthz(client authorizationclient.AuthorizationV1Interface, ...) (authorizer.Authorizer, error)
• func GetDynamicPluginProber(pluginDir string, runner exec.Interface) volume.DynamicPluginProber
• func InitializeTLS(kf *options.KubeletFlags, kc *kubeletconfiginternal.KubeletConfiguration) (*server.TLSOptions, error)
• func NewKubeletCommand() *cobra.Command
• func ProbeVolumePlugins(featureGate featuregate.FeatureGate) ([]volume.VolumePlugin, error)
• func Run(ctx context.Context, s *options.KubeletServer, kubeDeps *kubelet.Dependencies, ...) error
• func RunKubelet(kubeServer *options.KubeletServer, kubeDeps *kubelet.Dependencies, ...) error
• func UnsecuredDependencies(s *options.KubeletServer, featureGate featuregate.FeatureGate) (*kubelet.Dependencies, error)

Functions

func BuildAuth

func BuildAuth(nodeName types.NodeName, client clientset.Interface, config kubeletconfig.KubeletConfiguration) (server.AuthInterface, func(<-chan struct{}), error)

BuildAuth creates an authenticator, an authorizer, and a matching authorizer attributes getter compatible with the kubelet's needs It returns AuthInterface, a run method to start internal controllers (like cert reloading) and error.

func BuildAuthn

func BuildAuthn(client authenticationclient.AuthenticationV1Interface, authn kubeletconfig.KubeletAuthentication) (authenticator.Request, func(<-chan struct{}), error)

BuildAuthn creates an authenticator compatible with the kubelet's needs

func BuildAuthz

func BuildAuthz(client authorizationclient.AuthorizationV1Interface, authz kubeletconfig.KubeletAuthorization) (authorizer.Authorizer, error)

BuildAuthz creates an authorizer compatible with the kubelet's needs

func GetDynamicPluginProber

func GetDynamicPluginProber(pluginDir string, runner exec.Interface) volume.DynamicPluginProber

GetDynamicPluginProber gets the probers of dynamically discoverable plugins for kubelet. Currently only Flexvolume plugins are dynamically discoverable.

func InitializeTLS

func InitializeTLS(kf *options.KubeletFlags, kc *kubeletconfiginternal.KubeletConfiguration) (*server.TLSOptions, error)

InitializeTLS checks for a configured TLSCertFile and TLSPrivateKeyFile: if unspecified a new self-signed certificate and key file are generated. Returns a configured server.TLSOptions object.

func NewKubeletCommand

func NewKubeletCommand() *cobra.Command

NewKubeletCommand creates a *cobra.Command object with default parameters

func ProbeVolumePlugins

func ProbeVolumePlugins(featureGate featuregate.FeatureGate) ([]volume.VolumePlugin, error)

ProbeVolumePlugins collects all volume plugins into an easy to use list.

func Run

func Run(ctx context.Context, s *options.KubeletServer, kubeDeps *kubelet.Dependencies, featureGate featuregate.FeatureGate) error

Run runs the specified KubeletServer with the given Dependencies. This should never exit. The kubeDeps argument may be nil - if so, it is initialized from the settings on KubeletServer. Otherwise, the caller is assumed to have set up the Dependencies object and a default one will not be generated.

func RunKubelet

func RunKubelet(kubeServer *options.KubeletServer, kubeDeps *kubelet.Dependencies, runOnce bool) error

RunKubelet is responsible for setting up and running a kubelet. It is used in three different applications:

1 Integration tests
2 Kubelet binary
3 Standalone 'kubernetes' binary

Eventually, #2 will be replaced with instances of #3

func UnsecuredDependencies

func UnsecuredDependencies(s *options.KubeletServer, featureGate featuregate.FeatureGate) (*kubelet.Dependencies, error)

UnsecuredDependencies returns a Dependencies suitable for being run, or an error if the server setup is not valid. It will not start any background processes, and does not include authentication/authorization