Documentation
¶
Index ¶
- Constants
- Variables
- func ConfigureClusterRoleBinding(sa *corev1obj.ServiceAccount, crb *rbacv1obj.ClusterRoleBinding)
- func ConfigureClusterRoleBindingWithRoleRef(sa *corev1obj.ServiceAccount, crb *rbacv1obj.ClusterRoleBinding, ...)
- func ConfigureCoreDefaults(cd *CoreDeps)
- func ConfigureJWTSigningKeys(sec *corev1obj.Secret) error
- func ConfigureLogServiceContainer(coreobj *obj.Core, c *corev1.Container)
- func ConfigureLogServiceDeployment(ld *LogServiceDeps, dep *appsv1obj.Deployment)
- func ConfigureLogServiceService(ld *LogServiceDeps, svc *corev1obj.Service)
- func ConfigureMetadataAPIClusterRole(cr *rbacv1obj.ClusterRole)
- func ConfigureMutatingWebhook(od *OperatorDeps, mw *admissionv1.MutatingWebhook, name string, path *string)
- func ConfigureOperatorClusterRole(cr *rbacv1obj.ClusterRole)
- func ConfigureOperatorDelegateClusterRole(cr *rbacv1obj.ClusterRole)
- func ConfigureOperatorWebhookConfiguration(od *OperatorDeps, mwc *admissionregistrationv1obj.MutatingWebhookConfiguration)
- func ConfigureRoleBinding(sa *corev1obj.ServiceAccount, rb *rbacv1obj.RoleBinding)
- func ConfigureVaultAgentConfigMap(core *obj.Core, role string, cm *corev1obj.ConfigMap)
- func ConfigureVaultAgentTokenSecret(vd *VaultAgentDeps, secret *corev1obj.Secret)
- func ConfigureVaultConfigJob(coreKey types.NamespacedName, logServiceConfig *v1alpha1.LogServiceConfig, ...)
- func ConfigureVaultConfigRole(r *rbacv1obj.Role)
- func ConfigureVaultContainer(coreobj *obj.Core, c *corev1.Container)
- func ConfigureVaultService(vd *VaultServerBuiltInConfigDeps, svc *corev1obj.Service)
- func ConfigureVaultStatefulSet(vd *VaultServerBuiltInConfigDeps, ss *appsv1obj.StatefulSet)
- func ConfigureWebhookCertificateControllerClusterRole(cr *rbacv1obj.ClusterRole)
- func ConfigureWebhookCertificateControllerContainer(wd *WebhookCertificateControllerDeps, c *corev1.Container)
- func ConfigureWebhookCertificateControllerDeployment(wd *WebhookCertificateControllerDeps, dep *appsv1obj.Deployment)
- func VaultAuthDataEnvVar(name string, vad *v1alpha1.VaultAuthData) (corev1.EnvVar, bool)
- type CoreDeps
- func (cd *CoreDeps) Configure(_ context.Context) error
- func (cd *CoreDeps) Delete(ctx context.Context, cl client.Client, opts ...lifecycle.DeleteOption) (bool, error)
- func (cd *CoreDeps) Load(ctx context.Context, cl client.Client) (*CoreDepsLoadResult, error)
- func (cd *CoreDeps) Persist(ctx context.Context, cl client.Client) error
- type CoreDepsLoadResult
- type JWTSigningKeyDeps
- func (d *JWTSigningKeyDeps) Configure(_ context.Context) error
- func (d *JWTSigningKeyDeps) Delete(ctx context.Context, cl client.Client, opts ...lifecycle.DeleteOption) (bool, error)
- func (d *JWTSigningKeyDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (d *JWTSigningKeyDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (d *JWTSigningKeyDeps) Persist(ctx context.Context, cl client.Client) error
- func (d *JWTSigningKeyDeps) PrivateKey() corev1.SecretKeySelector
- func (d *JWTSigningKeyDeps) PublicKey() corev1.SecretKeySelector
- type LogServiceDeps
- func (ld *LogServiceDeps) Configure(ctx context.Context) error
- func (ld *LogServiceDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (ld *LogServiceDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (ld *LogServiceDeps) Persist(ctx context.Context, cl client.Client) error
- type MetadataAPIDeps
- func (md *MetadataAPIDeps) Configure(ctx context.Context) error
- func (md *MetadataAPIDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (md *MetadataAPIDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (md *MetadataAPIDeps) Persist(ctx context.Context, cl client.Client) error
- type OperatorDeps
- func (od *OperatorDeps) Configure(ctx context.Context) error
- func (od *OperatorDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (od *OperatorDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (od *OperatorDeps) Persist(ctx context.Context, cl client.Client) error
- type VaultAgentConfig
- type VaultAgentDeps
- func (vd *VaultAgentDeps) Configure(ctx context.Context) error
- func (vd *VaultAgentDeps) DeploymentVolumes() []corev1.Volume
- func (vd *VaultAgentDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (vd *VaultAgentDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (vd *VaultAgentDeps) Persist(ctx context.Context, cl client.Client) error
- func (vd *VaultAgentDeps) SidecarContainer() corev1.Container
- type VaultAutoAuth
- type VaultAutoAuthMethod
- type VaultCache
- type VaultConfigDeps
- func (vcd *VaultConfigDeps) Configure(ctx context.Context) error
- func (vcd *VaultConfigDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (vcd *VaultConfigDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (vcd *VaultConfigDeps) Persist(ctx context.Context, cl client.Client) error
- type VaultEngineConfigDeps
- func (vd *VaultEngineConfigDeps) Configure(ctx context.Context) error
- func (vd *VaultEngineConfigDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (vd *VaultEngineConfigDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (vd *VaultEngineConfigDeps) Persist(ctx context.Context, cl client.Client) error
- type VaultListener
- type VaultServer
- type VaultServerBuiltInConfigDeps
- func (vd *VaultServerBuiltInConfigDeps) Configure(ctx context.Context) error
- func (vd *VaultServerBuiltInConfigDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (vd *VaultServerBuiltInConfigDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (vd *VaultServerBuiltInConfigDeps) Persist(ctx context.Context, cl client.Client) error
- func (vd *VaultServerBuiltInConfigDeps) Volumes() []corev1.Volume
- type WebhookCertificateControllerDeps
- func (wd *WebhookCertificateControllerDeps) Configure(ctx context.Context) error
- func (d *WebhookCertificateControllerDeps) Load(ctx context.Context, cl client.Client) (bool, error)
- func (d *WebhookCertificateControllerDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
- func (d *WebhookCertificateControllerDeps) Persist(ctx context.Context, cl client.Client) error
Constants ¶
View Source
const ( VaultConfigFileName = "vault.hcl" VaultConfigVolumeName = "vault-config" VaultConfigVolumePath = "/var/run/vault/config" VaultDataVolumePath = "/vault/data" VaultDataVolumeName = "data" VaultIdentifier = "vault" )
View Source
const (
DefaultLogServicePort = 7050
)
Variables ¶
View Source
var DependencyManager = ownerext.NewManager("installer.relay.sh/dependency-of")
Functions ¶
func ConfigureClusterRoleBinding ¶
func ConfigureClusterRoleBinding(sa *corev1obj.ServiceAccount, crb *rbacv1obj.ClusterRoleBinding)
func ConfigureClusterRoleBindingWithRoleRef ¶
func ConfigureClusterRoleBindingWithRoleRef(sa *corev1obj.ServiceAccount, crb *rbacv1obj.ClusterRoleBinding, rr rbacv1.RoleRef)
func ConfigureCoreDefaults ¶
func ConfigureCoreDefaults(cd *CoreDeps)
func ConfigureJWTSigningKeys ¶
func ConfigureLogServiceDeployment ¶
func ConfigureLogServiceDeployment(ld *LogServiceDeps, dep *appsv1obj.Deployment)
func ConfigureLogServiceService ¶
func ConfigureLogServiceService(ld *LogServiceDeps, svc *corev1obj.Service)
func ConfigureMetadataAPIClusterRole ¶
func ConfigureMetadataAPIClusterRole(cr *rbacv1obj.ClusterRole)
func ConfigureMutatingWebhook ¶
func ConfigureMutatingWebhook(od *OperatorDeps, mw *admissionv1.MutatingWebhook, name string, path *string)
func ConfigureOperatorClusterRole ¶
func ConfigureOperatorClusterRole(cr *rbacv1obj.ClusterRole)
func ConfigureOperatorDelegateClusterRole ¶
func ConfigureOperatorDelegateClusterRole(cr *rbacv1obj.ClusterRole)
func ConfigureOperatorWebhookConfiguration ¶
func ConfigureOperatorWebhookConfiguration(od *OperatorDeps, mwc *admissionregistrationv1obj.MutatingWebhookConfiguration)
func ConfigureRoleBinding ¶
func ConfigureRoleBinding(sa *corev1obj.ServiceAccount, rb *rbacv1obj.RoleBinding)
func ConfigureVaultAgentTokenSecret ¶
func ConfigureVaultAgentTokenSecret(vd *VaultAgentDeps, secret *corev1obj.Secret)
func ConfigureVaultConfigJob ¶
func ConfigureVaultConfigJob( coreKey types.NamespacedName, logServiceConfig *v1alpha1.LogServiceConfig, metadataAPIConfig v1alpha1.MetadataAPIConfig, operatorConfig v1alpha1.OperatorConfig, vaultConfig v1alpha1.VaultConfig, job *batchv1obj.Job, sa *corev1obj.ServiceAccount, jskd *JWTSigningKeyDeps)
func ConfigureVaultService ¶
func ConfigureVaultService(vd *VaultServerBuiltInConfigDeps, svc *corev1obj.Service)
func ConfigureVaultStatefulSet ¶
func ConfigureVaultStatefulSet(vd *VaultServerBuiltInConfigDeps, ss *appsv1obj.StatefulSet)
func ConfigureWebhookCertificateControllerClusterRole ¶
func ConfigureWebhookCertificateControllerClusterRole(cr *rbacv1obj.ClusterRole)
func ConfigureWebhookCertificateControllerContainer ¶
func ConfigureWebhookCertificateControllerContainer(wd *WebhookCertificateControllerDeps, c *corev1.Container)
func ConfigureWebhookCertificateControllerDeployment ¶
func ConfigureWebhookCertificateControllerDeployment(wd *WebhookCertificateControllerDeps, dep *appsv1obj.Deployment)
func VaultAuthDataEnvVar ¶
Types ¶
type CoreDeps ¶
type CoreDeps struct {
Core *obj.Core
OwnerConfigMap *corev1obj.ConfigMap
Namespace *corev1obj.Namespace
VaultConfigDeps *VaultConfigDeps
OperatorDeps *OperatorDeps
MetadataAPIDeps *MetadataAPIDeps
LogServiceDeps *LogServiceDeps
}
func ApplyCoreDeps ¶
func NewCoreDeps ¶
type CoreDepsLoadResult ¶
type CoreDepsLoadResult struct {
All bool
}
type JWTSigningKeyDeps ¶
type JWTSigningKeyDeps struct {
Core *obj.Core
OwnerConfigMap *corev1obj.ConfigMap
ManagedJWTSigningKeySecret *corev1obj.Secret
Labels map[string]string
}
func NewJWTSigningKeyDeps ¶
func NewJWTSigningKeyDeps(c *obj.Core) *JWTSigningKeyDeps
func (*JWTSigningKeyDeps) Configure ¶
func (d *JWTSigningKeyDeps) Configure(_ context.Context) error
func (*JWTSigningKeyDeps) Delete ¶
func (d *JWTSigningKeyDeps) Delete(ctx context.Context, cl client.Client, opts ...lifecycle.DeleteOption) (bool, error)
func (*JWTSigningKeyDeps) Owned ¶
func (d *JWTSigningKeyDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
func (*JWTSigningKeyDeps) PrivateKey ¶
func (d *JWTSigningKeyDeps) PrivateKey() corev1.SecretKeySelector
func (*JWTSigningKeyDeps) PublicKey ¶
func (d *JWTSigningKeyDeps) PublicKey() corev1.SecretKeySelector
type LogServiceDeps ¶
type LogServiceDeps struct {
Core *obj.Core
Deployment *appsv1.Deployment
Service *corev1.Service
ServiceAccount *corev1.ServiceAccount
OwnerConfigMap *corev1.ConfigMap
VaultAgentDeps *VaultAgentDeps
Labels map[string]string
}
func NewLogServiceDeps ¶
func NewLogServiceDeps(c *obj.Core) *LogServiceDeps
func (*LogServiceDeps) Owned ¶
func (ld *LogServiceDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
type MetadataAPIDeps ¶
type MetadataAPIDeps struct {
Core *obj.Core
Deployment *metadataAPIDeployment
Service *metadataAPIService
ServiceAccount *corev1.ServiceAccount
ClusterRole *rbacv1.ClusterRole
ClusterRoleBinding *rbacv1.ClusterRoleBinding
OwnerConfigMap *corev1.ConfigMap
VaultAgentDeps *VaultAgentDeps
Labels map[string]string
}
func NewMetadataAPIDeps ¶
func NewMetadataAPIDeps(c *obj.Core) *MetadataAPIDeps
func (*MetadataAPIDeps) Owned ¶
func (md *MetadataAPIDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
type OperatorDeps ¶
type OperatorDeps struct {
Core *obj.Core
Deployment *operatorDeployment
WebhookService *operatorWebhookService
ServiceAccount *corev1obj.ServiceAccount
TenantNamespace *corev1obj.Namespace
ClusterRole *rbacv1obj.ClusterRole
ClusterRoleBinding *rbacv1obj.ClusterRoleBinding
DelegateClusterRole *rbacv1obj.ClusterRole
DelegateClusterRoleBinding *rbacv1obj.ClusterRoleBinding
WebhookConfig *admissionregistrationv1.MutatingWebhookConfiguration
OwnerConfigMap *corev1obj.ConfigMap
WebhookCertificateControllerDeps *WebhookCertificateControllerDeps
VaultAgentDeps *VaultAgentDeps
VaultConfigDeps *VaultConfigDeps
Labels map[string]string
}
func NewOperatorDeps ¶
func NewOperatorDeps(c *obj.Core, vcd *VaultConfigDeps) *OperatorDeps
func (*OperatorDeps) Owned ¶
func (od *OperatorDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
type VaultAgentConfig ¶
type VaultAgentConfig struct {
AutoAuth *VaultAutoAuth `hcl:"auto_auth,block"`
Cache *VaultCache `hcl:"cache,block"`
Listeners []*VaultListener `hcl:"listener,block"`
Vault *VaultServer `hcl:"vault,block"`
}
type VaultAgentDeps ¶
type VaultAgentDeps struct {
Core *obj.Core
ConfigMap *corev1obj.ConfigMap
ServiceAccount *corev1obj.ServiceAccount
TokenSecret *corev1obj.Secret
OwnerConfigMap *corev1obj.ConfigMap
Role string
}
func NewVaultAgentDepsForRole ¶
func NewVaultAgentDepsForRole(role string, c *obj.Core) *VaultAgentDeps
func (*VaultAgentDeps) DeploymentVolumes ¶
func (vd *VaultAgentDeps) DeploymentVolumes() []corev1.Volume
func (*VaultAgentDeps) Owned ¶
func (vd *VaultAgentDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
func (*VaultAgentDeps) SidecarContainer ¶
func (vd *VaultAgentDeps) SidecarContainer() corev1.Container
type VaultAutoAuth ¶
type VaultAutoAuth struct {
Method *VaultAutoAuthMethod `hcl:"method,block"`
}
type VaultAutoAuthMethod ¶
type VaultCache ¶
type VaultCache struct {
UseAutoAuthToken bool `hcl:"use_auto_auth_token"`
}
type VaultConfigDeps ¶
type VaultConfigDeps struct {
Core *obj.Core
OwnerConfigMap *corev1obj.ConfigMap
JWTSigningKeyDeps *JWTSigningKeyDeps
VaultEngineConfigDeps *VaultEngineConfigDeps
VaultServerBuiltInConfigDeps *VaultServerBuiltInConfigDeps
}
func NewVaultConfigDeps ¶
func NewVaultConfigDeps(c *obj.Core) *VaultConfigDeps
func (*VaultConfigDeps) Configure ¶
func (vcd *VaultConfigDeps) Configure(ctx context.Context) error
func (*VaultConfigDeps) Owned ¶
func (vcd *VaultConfigDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
type VaultEngineConfigDeps ¶
type VaultEngineConfigDeps struct {
Core *obj.Core
ConfigJob *batchv1obj.Job
OwnerConfigMap *corev1obj.ConfigMap
Role *rbacv1obj.Role
RoleBinding *rbacv1obj.RoleBinding
ServiceAccount *corev1obj.ServiceAccount
JWTSigningKeyDeps *JWTSigningKeyDeps
Labels map[string]string
}
func NewVaultSystemConfigDeps ¶
func NewVaultSystemConfigDeps(c *obj.Core, jskd *JWTSigningKeyDeps) *VaultEngineConfigDeps
func (*VaultEngineConfigDeps) Configure ¶
func (vd *VaultEngineConfigDeps) Configure(ctx context.Context) error
func (*VaultEngineConfigDeps) Owned ¶
func (vd *VaultEngineConfigDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
type VaultListener ¶
type VaultServer ¶
type VaultServer struct {
Address string `hcl:"address"`
}
type VaultServerBuiltInConfigDeps ¶
type VaultServerBuiltInConfigDeps struct {
Core *obj.Core
ClusterRoleBinding *rbacv1obj.ClusterRoleBinding
OwnerConfigMap *corev1obj.ConfigMap
Service *corev1obj.Service
ServiceAccount *corev1obj.ServiceAccount
StatefulSet *appsv1obj.StatefulSet
Labels map[string]string
}
func NewVaultServerBuiltInConfigDeps ¶
func NewVaultServerBuiltInConfigDeps(c *obj.Core) *VaultServerBuiltInConfigDeps
func (*VaultServerBuiltInConfigDeps) Configure ¶
func (vd *VaultServerBuiltInConfigDeps) Configure(ctx context.Context) error
func (*VaultServerBuiltInConfigDeps) Owned ¶
func (vd *VaultServerBuiltInConfigDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
func (*VaultServerBuiltInConfigDeps) Volumes ¶
func (vd *VaultServerBuiltInConfigDeps) Volumes() []corev1.Volume
type WebhookCertificateControllerDeps ¶
type WebhookCertificateControllerDeps struct {
Core *obj.Core
TargetDeployment types.NamespacedName
Deployment *appsv1obj.Deployment
ServiceAccount *corev1obj.ServiceAccount
ClusterRole *rbacv1obj.ClusterRole
ClusterRoleBinding *rbacv1obj.ClusterRoleBinding
OwnerConfigMap *corev1obj.ConfigMap
Labels map[string]string
}
func NewWebhookCertificateControllerDeps ¶
func NewWebhookCertificateControllerDeps(target types.NamespacedName, c *obj.Core) *WebhookCertificateControllerDeps
func (*WebhookCertificateControllerDeps) Configure ¶
func (wd *WebhookCertificateControllerDeps) Configure(ctx context.Context) error
func (*WebhookCertificateControllerDeps) Owned ¶
func (d *WebhookCertificateControllerDeps) Owned(ctx context.Context, owner lifecycle.TypedObject) error
Source Files
¶
- admissionregistration.go
- app.go
- clusterrole.go
- coredeps.go
- jwtsigningkeydeps.go
- logservice.go
- logservicedeps.go
- metadataapi.go
- metadataapideps.go
- operator.go
- operatordeps.go
- rolebinding.go
- vaultagent.go
- vaultagentconfig.go
- vaultagentdeps.go
- vaultconfigdeps.go
- vaultengineconfigdeps.go
- vaultserverbuiltinconfigdeps.go
- webhookcertificatecontroller.go
- webhookcertificatecontrollerdeps.go
Click to show internal directories.
Click to hide internal directories.