Documentation
¶
Overview ¶
Package ingress contains all the logic for Cilium Ingress Controller. Only Ingress resources having annotations."kubernetes.io/ingress.class" or spec.ingressClassName set to "cilium" are managed and processed by the Cilium Ingress Controller.
Two LB modes are supported:
- dedicated LB mode: a dedicated LB is used for each Ingress.
- shared LB mode: all eligible Ingresses are using the same LB.
Each LB mode will have its own translation logic, which converts Ingress resource(s) into internal representation, and then turns it into a set of Cilium configurations (e.g. CiliumEnvoyConfig, LB Service, Endpoints etc.).
- Create one Load Balancer service, the external IP/FQDN is available will bubble up to Ingress status once ready. (dedicated LB mode only)
- Create dummy Endpoint for above LB service. (dedicated LB mode only)
- Create CiliumEnvoyConfig with all routing details. (both modes)
There is a small secret sync component, which will watch all tls ingress secrets and sync them to another give namespace. This is to limit the permission during runtime in all nodes.
Index ¶
Constants ¶
This section is empty.
Variables ¶
var Cell = cell.Module( "ingress", "Manages the Kubernetes Ingress controllers", cell.Config(IngressConfig{ EnableIngressController: false, EnforceIngressHTTPS: true, EnableIngressProxyProtocol: false, EnableIngressSecretsSync: true, IngressSecretsNamespace: "cilium-secrets", IngressDefaultRequestTimeout: time.Duration(0), IngressLBAnnotationPrefixes: []string{"lbipam.cilium.io", "service.beta.kubernetes.io", "service.kubernetes.io", "cloud.google.com"}, IngressSharedLBServiceName: "cilium-ingress", IngressDefaultLBMode: "dedicated", IngressHostnetworkEnabled: false, IngressHostnetworkSharedListenerPort: 0, IngressHostnetworkHTTPListenerPort: 0, IngressHostnetworkHTTPSListenerPort: 0, IngressHostnetworkTLSPassthroughListenerPort: 0, IngressHostnetworkNodelabelselector: "", IngressUseRemoteAddress: true, }), cell.Invoke(registerReconciler), cell.Provide(registerSecretSync), )
Cell manages the Kubernetes Ingress related controllers.
Functions ¶
func EnqueueReferencedTLSSecrets ¶ added in v1.15.0
Types ¶
type IngressConfig ¶ added in v1.15.13
type IngressConfig struct {
EnableIngressController bool
EnforceIngressHTTPS bool
EnableIngressProxyProtocol bool
EnableIngressSecretsSync bool
IngressSecretsNamespace string
IngressLBAnnotationPrefixes []string
IngressDefaultLBMode string
IngressDefaultSecretNamespace string
IngressDefaultSecretName string
IngressDefaultRequestTimeout time.Duration
IngressHostnetworkEnabled bool
IngressHostnetworkHTTPListenerPort uint32
IngressHostnetworkHTTPSListenerPort uint32
IngressHostnetworkTLSPassthroughListenerPort uint32
IngressHostnetworkNodelabelselector string
IngressDefaultXffNumTrustedHops uint32
IngressUseRemoteAddress bool
}
func (IngressConfig) Flags ¶ added in v1.15.13
func (r IngressConfig) Flags(flags *pflag.FlagSet)
func (IngressConfig) IsEnabled ¶ added in v1.15.13
func (r IngressConfig) IsEnabled() bool
IsEnabled returns true if the Ingress Controller is enabled.
Source Files
¶
Directories
¶
| Path | Synopsis |
|---|---|
|
Package annotations contains all annotations that supported by cilium ingress controller along with some sensible defaults.
|
Package annotations contains all annotations that supported by cilium ingress controller along with some sensible defaults. |