Documentation
¶
Index ¶
- type EgressManager
- func (e *EgressManager) CollectObservations(ctx context.Context) ([]runtimeevent.Event, error)
- func (e *EgressManager) PodDeleted(uid string) error
- func (e *EgressManager) PodEvent(pod corev1.Pod, nsLabels map[string]string, ...) error
- func (e *EgressManager) RuntimePolicyEvent(compiledRb *compiler.EvaluationResult, rpEventType string) error
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type EgressManager ¶
type EgressManager struct {
// contains filtered or unexported fields
}
func NewEgressManager ¶
func NewEgressManager(logger logr.Logger, status runtimeevent.PolicyStatusRecorder, onLoss runtimeevent.LossFunc) *EgressManager
func (*EgressManager) CollectObservations ¶
func (e *EgressManager) CollectObservations(ctx context.Context) ([]runtimeevent.Event, error)
CollectObservations drains the IPv4 and protocol observation counters of every pod with an attached policy and turns them into one event per (destination, decision) and (protocol, decision). Reads are destructive, so Count is the delta since the previous call.
func (*EgressManager) PodDeleted ¶
func (e *EgressManager) PodDeleted(uid string) error
PodDeleted tears down the pod's egress filter and bookkeeping.
func (*EgressManager) PodEvent ¶
func (e *EgressManager) PodEvent(pod corev1.Pod, nsLabels map[string]string, cgInfos []*containers.ContainerCgroupInfo, podEventType string) error
func (*EgressManager) RuntimePolicyEvent ¶
func (e *EgressManager) RuntimePolicyEvent(compiledRb *compiler.EvaluationResult, rpEventType string) error
Source Files
Click to show internal directories.
Click to hide internal directories.