controller

Nov 1, 2026

Changes in this version

+ const DefaultNRISocket

+ const DefaultSecretResyncPeriod

+ const KubeDNSName

+ const KubeDNSNamespace

+ func TrustedDNSServers(ctx context.Context, reader client.Reader, static []net.IP, ...) []net.IP

+ type Container struct

+ ID string

+ Name string

+ type NRIPlugin struct

+ HostRoot string

+ Log *zap.SugaredLogger

+ Preparer Preparer

+ RetryAfterClose time.Duration

+ RetryUnavailable time.Duration

+ SocketPath string

+ func (p *NRIPlugin) Run(ctx context.Context) error

+ type Preparer interface

+ PrepareContainer func(ctx context.Context, sb *Sandbox, c *Container)

+ PrepareSandbox func(ctx context.Context, sb *Sandbox) bool

type Reconciler

+ APIReader client.Reader

+ func (r *Reconciler) PrepareContainer(ctx context.Context, sb *Sandbox, c *Container)

+ func (r *Reconciler) PrepareSandbox(ctx context.Context, sb *Sandbox) bool

+ type Sandbox struct

+ Annotations map[string]string

+ ID string

+ IPs []netip.Addr

+ Name string

+ Namespace string

+ NetnsPath string

+ UID string

+ type SecretSyncReconciler struct

+ ResyncPeriod time.Duration

+ Sync func(context.Context) error

+ func (r *SecretSyncReconciler) Reconcile(ctx context.Context, _ ctrl.Request) (ctrl.Result, error)

+ func (r *SecretSyncReconciler) SetupWithManager(mgr ctrl.Manager) error

+ type TrustedDNSReconciler struct

+ Apply func([]net.IP) error

+ Log *zap.SugaredLogger

+ Static []net.IP

+ func (r *TrustedDNSReconciler) Reconcile(ctx context.Context, _ ctrl.Request) (ctrl.Result, error)

+ func (r *TrustedDNSReconciler) SetupWithManager(mgr ctrl.Manager) error

Apr 20, 2026

Changes in this version

+ const AnnotationEnabled

+ const AnnotationHosts

+ const AnnotationPort

+ const AnnotationSecretEnabled

+ const CgroupBasePath

+ const ShadowPrefixLen

+ const ShadowSecretSuffix

+ const ValuePrefix

+ type Reconciler struct

+ CgroupRoot string

+ Log *zap.SugaredLogger

+ NodeName string

+ Scheme *runtime.Scheme

+ UprobeManager *ebpf.TLSUprobeManager

+ func NewReconciler(c client.Client, log *zap.SugaredLogger, scheme *runtime.Scheme, ...) *Reconciler

+ func (r *Reconciler) GetTrackedPodCount() int

+ func (r *Reconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *Reconciler) SetupWithManager(mgr ctrl.Manager) error

+ type SecretReconciler struct

+ Log *zap.SugaredLogger

+ Scheme *runtime.Scheme

+ func (r *SecretReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error)

+ func (r *SecretReconciler) SetupWithManager(mgr ctrl.Manager) error