resources

Documentation

Overview

Package resources holds simple functions for synthesizing child resources from an Ingress resource and any relevant Ingress controller configuration.

Index

• Constants
• func CategorizeSecrets(secrets map[string]*corev1.Secret) (map[string]*corev1.Secret, map[string]*corev1.Secret, error)
• func GatewayName(accessor kmeta.Accessor, gatewaySvc *corev1.Service) string
• func GatewayRef(gw *v1alpha3.Gateway) tracker.Reference
• func GenerateCertificate(host string, secretName string, namespace string) (*corev1.Secret, error)
• func GetHTTPServer(gateway *v1alpha3.Gateway) *istiov1alpha3.Server
• func GetHostsFromCertSecret(secret *corev1.Secret) ([]string, error)
• func GetIngressGatewaySvcNameNamespaces(ctx context.Context) ([]metav1.ObjectMeta, error)
• func GetNonWildcardIngressTLS(ingressTLS []v1alpha1.IngressTLS, nonWildcardSecrest map[string]*corev1.Secret) []v1alpha1.IngressTLS
• func GetQualifiedGatewayNames(gateways []*v1alpha3.Gateway) []string
• func GetSecrets(ing *v1alpha1.Ingress, secretLister corev1listers.SecretLister) (map[string]*corev1.Secret, error)
• func GetServers(gateway *v1alpha3.Gateway, ing *v1alpha1.Ingress) []*istiov1alpha3.Server
• func MakeHTTPServer(httpProtocol network.HTTPProtocol, hosts []string) *istiov1alpha3.Server
• func MakeIngressTLSGateways(ctx context.Context, ing *v1alpha1.Ingress, ingressTLS []v1alpha1.IngressTLS, ...) ([]*v1alpha3.Gateway, error)
• func MakeIngressVirtualService(ctx context.Context, ing *v1alpha1.Ingress, ...) *v1alpha3.VirtualService
• func MakeMeshVirtualService(ctx context.Context, ing *v1alpha1.Ingress, ...) *v1alpha3.VirtualService
• func MakeSecrets(ctx context.Context, originSecrets map[string]*corev1.Secret, ...) ([]*corev1.Secret, error)
• func MakeTLSServers(ing *v1alpha1.Ingress, ingressTLS []v1alpha1.IngressTLS, ...) ([]*istiov1alpha3.Server, error)
• func MakeTargetSecretLabels(originSecretName, originSecretNamespace string) map[string]string
• func MakeVirtualServices(ctx context.Context, ing *v1alpha1.Ingress, ...) ([]*v1alpha3.VirtualService, error)
• func MakeWildcardGateways(ctx context.Context, originWildcardSecrets map[string]*corev1.Secret, ...) ([]*v1alpha3.Gateway, error)
• func MakeWildcardSecrets(ctx context.Context, originWildcardCerts map[string]*corev1.Secret) ([]*corev1.Secret, error)
• func SecretRef(namespace, name string) tracker.Reference
• func ServiceNamespaceFromURL(svc string) (string, error)
• func SortServers(servers []*istiov1alpha3.Server) []*istiov1alpha3.Server
• func UpdateGateway(gateway *v1alpha3.Gateway, want []*istiov1alpha3.Server, ...) *v1alpha3.Gateway
• func VirtualServiceNamespace(ing *v1alpha1.Ingress) string
• func WildcardGatewayName(secretName, gatewayServiceNamespace, gatewayServiceName string) string

Constants

const (
	// ServingGroupName is the group name for Knative serving labels
	// and annotations
	ServingGroupName = "serving.knative.dev"
	// RouteLabelKey is the label key attached to a Configuration
	// indicating by which Route it is configured as traffic target.
	// The key is also attached to Revision resources to indicate they
	// are directly referenced by a Route, or are a child of a
	// Configuration which is referenced by a Route.  The key can also
	// be attached to Ingress resources to indicate which Route
	// triggered their creation.  The key is also attached to k8s
	// Service resources to indicate which Route triggered their
	// creation.
	RouteLabelKey = ServingGroupName + "/route"
	// RouteNamespaceLabelKey is the label key attached to a Ingress
	// by a Route to indicate which namespace the Route was created in.
	RouteNamespaceLabelKey = ServingGroupName + "/routeNamespace"
)

const GatewayHTTPPort = 80

GatewayHTTPPort is the HTTP port the gateways listen on.

Functions

func CategorizeSecrets

func CategorizeSecrets(secrets map[string]*corev1.Secret) (map[string]*corev1.Secret, map[string]*corev1.Secret, error)

CategorizeSecrets categorizes secrets into two sets: wildcard cert secrets and non-wildcard cert secrets.

func GatewayName

func GatewayName(accessor kmeta.Accessor, gatewaySvc *corev1.Service) string

GatewayName create a name for the Gateway that is built based on the given Ingress and bonds to the given ingress gateway service.

func GatewayRef

func GatewayRef(gw *v1alpha3.Gateway) tracker.Reference

GatewayRef returns the Reference for a give Gateway.

func GenerateCertificate

func GenerateCertificate(host string, secretName string, namespace string) (*corev1.Secret, error)

func GetHTTPServer

func GetHTTPServer(gateway *v1alpha3.Gateway) *istiov1alpha3.Server

GetHTTPServer gets the HTTP `Server` from `Gateway`.

func GetHostsFromCertSecret

func GetHostsFromCertSecret(secret *corev1.Secret) ([]string, error)

GetHostsFromCertSecret gets cert hosts from cert secret.

func GetIngressGatewaySvcNameNamespaces

func GetIngressGatewaySvcNameNamespaces(ctx context.Context) ([]metav1.ObjectMeta, error)

TODO(nghia): Remove this by parsing at config parsing time. GetIngressGatewaySvcNameNamespaces gets the Istio ingress namespaces from ConfigMap.

func GetNonWildcardIngressTLS

func GetNonWildcardIngressTLS(ingressTLS []v1alpha1.IngressTLS, nonWildcardSecrest map[string]*corev1.Secret) []v1alpha1.IngressTLS

GetNonWildcardIngressTLS gets Ingress TLS that do not reference wildcard certificates.

func GetQualifiedGatewayNames

func GetQualifiedGatewayNames(gateways []*v1alpha3.Gateway) []string

GetQualifiedGatewayNames return the qualified Gateway names for the given Gateways.

func GetSecrets

func GetSecrets(ing *v1alpha1.Ingress, secretLister corev1listers.SecretLister) (map[string]*corev1.Secret, error)

GetSecrets gets the all of the secrets referenced by the given Ingress, and returns a map whose key is the a secret namespace/name key and value is pointer of the secret.

func GetServers

func GetServers(gateway *v1alpha3.Gateway, ing *v1alpha1.Ingress) []*istiov1alpha3.Server

GetServers gets the `Servers` from `Gateway` that belongs to the given Ingress.

func MakeHTTPServer

func MakeHTTPServer(httpProtocol network.HTTPProtocol, hosts []string) *istiov1alpha3.Server

MakeHTTPServer creates a HTTP Gateway `Server` based on the HTTPProtocol configuration.

func MakeIngressTLSGateways

func MakeIngressTLSGateways(ctx context.Context, ing *v1alpha1.Ingress, ingressTLS []v1alpha1.IngressTLS, originSecrets map[string]*corev1.Secret, svcLister corev1listers.ServiceLister) ([]*v1alpha3.Gateway, error)

MakeIngressTLSGateways creates Gateways for a given Ingress.

func MakeIngressVirtualService

func MakeIngressVirtualService(ctx context.Context, ing *v1alpha1.Ingress, gateways map[v1alpha1.IngressVisibility]sets.String) *v1alpha3.VirtualService

MakeIngressVirtualService creates Istio VirtualService as network programming for Istio Gateways other than 'mesh'.

func MakeMeshVirtualService

func MakeMeshVirtualService(ctx context.Context, ing *v1alpha1.Ingress, gateways map[v1alpha1.IngressVisibility]sets.String) *v1alpha3.VirtualService

MakeMeshVirtualService creates a mesh Virtual Service

func MakeSecrets

func MakeSecrets(ctx context.Context, originSecrets map[string]*corev1.Secret, accessor kmeta.OwnerRefableAccessor) ([]*corev1.Secret, error)

MakeSecrets makes copies of the origin Secrets under the namespace of Istio gateway service.

func MakeTLSServers

func MakeTLSServers(ing *v1alpha1.Ingress, ingressTLS []v1alpha1.IngressTLS, gatewayServiceNamespace string, originSecrets map[string]*corev1.Secret) ([]*istiov1alpha3.Server, error)

MakeTLSServers creates the expected Gateway TLS `Servers` based on the given IngressTLS.

func MakeTargetSecretLabels

func MakeTargetSecretLabels(originSecretName, originSecretNamespace string) map[string]string

MakeTargetSecretLabels returns the labels used in target secret.

func MakeVirtualServices

func MakeVirtualServices(ctx context.Context, ing *v1alpha1.Ingress, gateways map[v1alpha1.IngressVisibility]sets.String) ([]*v1alpha3.VirtualService, error)

MakeVirtualServices creates a mesh VirtualService and a virtual service for each gateway

func MakeWildcardGateways

func MakeWildcardGateways(ctx context.Context, originWildcardSecrets map[string]*corev1.Secret,
	svcLister corev1listers.ServiceLister) ([]*v1alpha3.Gateway, error)

MakeWildcardGateways creates gateways with wildcard hosts based on the wildcard secret information. For each public ingress service, we will create a list of Gateways. Each Gateway of the list corresponds to a wildcard cert secret.

func MakeWildcardSecrets

func MakeWildcardSecrets(ctx context.Context, originWildcardCerts map[string]*corev1.Secret) ([]*corev1.Secret, error)

MakeWildcardSecrets copies wildcard certificates from origin namespace to the namespace of gateway servicess so they could consumed by Istio ingress.

func SecretRef

func SecretRef(namespace, name string) tracker.Reference

SecretRef returns the Reference of a secret given the namespace and name of the secret.

func ServiceNamespaceFromURL

func ServiceNamespaceFromURL(svc string) (string, error)

ServiceNamespaceFromURL extracts the namespace part from the service URL. TODO(nghia): Remove this by parsing at config parsing time.

func SortServers

func SortServers(servers []*istiov1alpha3.Server) []*istiov1alpha3.Server

SortServers sorts `Server` according to its port name.

func UpdateGateway

func UpdateGateway(gateway *v1alpha3.Gateway, want []*istiov1alpha3.Server, existing []*istiov1alpha3.Server) *v1alpha3.Gateway

UpdateGateway replaces the existing servers with the wanted servers.

func VirtualServiceNamespace

func VirtualServiceNamespace(ing *v1alpha1.Ingress) string

VirtualServiceNamespace gives the namespace of the child VirtualServices for a given Ingress.

func WildcardGatewayName

func WildcardGatewayName(secretName, gatewayServiceNamespace, gatewayServiceName string) string

WildcardGatewayName creates the name of wildcard Gateway.