Help us shape the future of Go! Take the 2026 Go Developer Survey

Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

executioncontroller

package

Go to main page

Versions in this module

v0

v0.0.51

Oct 26, 2026

v0.0.50

Oct 23, 2026

v0.0.49

Oct 20, 2026

v0.0.48

Oct 13, 2026

Changes in this version

+ func CanonicalTemplateRevision(spec ProfileSpec) (string, error)

type ClientPolicy

+ ExecutionTemplates []string

type Handler

+ func (h *Handler) EnsureTemplate(ctx context.Context, q *executionv1.EnsureTemplateRequest) (*executionv1.EnsureEnvironmentResponse, error)

+ func (h *Handler) ListExecutionTemplates(ctx context.Context, _ *executionv1.ListExecutionTemplatesRequest) (*executionv1.ListExecutionTemplatesResponse, error)

+ func (h *Handler) ValidateTemplate(ctx context.Context, q *executionv1.ValidateTemplateRequest) (*executionv1.ValidateTemplateResponse, error)

type Profiles

+ func LoadTemplates(path string) (*Profiles, error)

+ func (p *Profiles) DefaultRevision(id string) string

type Store

+ func (s *Store) CatalogTemplates() []*executionv1.TemplateCatalogItem

+ func (s *Store) EnsurePendingOwnedRevision(ctx context.Context, client, expectedOwnerHash string, ...) (Allocation, error)

+ func (s *Store) ValidateTemplate(_ context.Context, id, revision string) (Profile, error)

+ func (s *Store) WithSecurityManager(security *SecurityManager) *Store

+ type TemplateDefinition struct

+ Default string

+ MaxEnvironments int

+ Revisions map[string]TemplateRevision

+ type TemplateDisplay struct

+ Description string

+ Extensions map[string]map[string]string

+ Name string

+ type TemplatePolicy struct

+ Deprecated bool

+ Revoked bool

+ type TemplateRevision struct

+ Deprecated bool

+ Display TemplateDisplay

+ Execution ProfileSpec

+ Revoked bool

+ type TemplatesFile struct

+ Templates map[string]TemplateDefinition

v0.0.47

Oct 8, 2026

v0.0.46

Oct 7, 2026

v0.0.45

Oct 7, 2026

v0.0.44

Oct 1, 2026

v0.0.43

Sep 30, 2026

v0.0.42

Sep 29, 2026

Changes in this version

+ var ExecutionEnvironmentGVR = schema.GroupVersionResource

+ func TLSConfig(server tls.Certificate, clientCAs *x509.CertPool) *tls.Config

+ type Allocation struct

+ BindingID string

+ Client string

+ Environment executionenv.EnvironmentRef

+ Epoch uint64

+ GrantGeneration uint64

+ OwnerHash string

+ Ready bool

+ type Backend interface

+ Attach func(context.Context, executionenv.EnvironmentRef, string, string, string) (Allocation, error)

+ CancelCommand func(context.Context, string, string, executionenv.CommandQueryRequest) (executionenv.CommandStatusResponse, error)

+ CommandStatus func(context.Context, string, string, executionenv.CommandQueryRequest) (executionenv.CommandStatusResponse, error)

+ Ensure func(context.Context, string, string, string, string, string) (Allocation, error)

+ File func(context.Context, string, string, executionenv.FileRequest) (executionenv.FileResponse, error)

+ ReleaseReference func(context.Context, executionenv.EnvironmentRef, string, string, string) error

+ StartCommand func(context.Context, string, string, executionenv.CommandStartRequest) (executionenv.CommandStartResponse, error)

+ ValidateProfile func(context.Context, string) (Profile, error)

+ type ClientPolicy struct

+ Administrator bool

+ AdministratorFor []string

+ MayAttestOwner bool

+ type ExecutorTransport interface

+ Execute func(context.Context, string, executionenv.ExecutorRequest) (executionenv.ExecutorResponse, error)

+ type GrantSigner struct

+ Audience string

+ Issuer string

+ KeyID string

+ Lifetime time.Duration

+ PrivateKey ed25519.PrivateKey

+ type Handler struct

+ func NewHandler(cfg HandlerConfig, b Backend) *Handler

+ func (h *Handler) AbortReference(ctx context.Context, q *executionv1.ReferenceMutationRequest) (*emptypb.Empty, error)

+ func (h *Handler) AcquireRun(ctx context.Context, q *executionv1.AcquireRunRequest) (*executionv1.RunClaimResponse, error)

+ func (h *Handler) AttachEnvironment(ctx context.Context, q *executionv1.AttachEnvironmentRequest) (*executionv1.AttachEnvironmentResponse, error)

+ func (h *Handler) CancelCommand(ctx context.Context, q *executionv1.CommandQueryRequest) (*executionv1.CommandStatusResponse, error)

+ func (h *Handler) CancelReferenceDelete(ctx context.Context, q *executionv1.ReferenceMutationRequest) (*emptypb.Empty, error)

+ func (h *Handler) CommandStatus(ctx context.Context, q *executionv1.CommandQueryRequest) (*executionv1.CommandStatusResponse, error)

+ func (h *Handler) CommitReference(ctx context.Context, q *executionv1.ReferenceMutationRequest) (*emptypb.Empty, error)

+ func (h *Handler) ConfirmReferenceDelete(ctx context.Context, q *executionv1.ReferenceMutationRequest) (*emptypb.Empty, error)

+ func (h *Handler) DeleteRetiredEnvironment(ctx context.Context, q *executionv1.DeleteRetiredEnvironmentRequest) (*emptypb.Empty, error)

+ func (h *Handler) EnsureEnvironment(ctx context.Context, q *executionv1.EnsureEnvironmentRequest) (*executionv1.EnsureEnvironmentResponse, error)

+ func (h *Handler) Files(ctx context.Context, q *executionv1.FileRequest) (*executionv1.FileResponse, error)

+ func (h *Handler) ListReferenceIntents(ctx context.Context, q *executionv1.ListReferenceIntentsRequest) (*executionv1.ListReferenceIntentsResponse, error)

+ func (h *Handler) MigrateEnvironment(ctx context.Context, q *executionv1.MigrateEnvironmentRequest) (*emptypb.Empty, error)

+ func (h *Handler) PrepareReferenceDelete(ctx context.Context, q *executionv1.ReferenceMutationRequest) (*emptypb.Empty, error)

+ func (h *Handler) RecoverEnvironment(ctx context.Context, q *executionv1.RecoverEnvironmentRequest) (*emptypb.Empty, error)

+ func (h *Handler) ReleaseReference(ctx context.Context, q *executionv1.ReleaseReferenceRequest) (*emptypb.Empty, error)

+ func (h *Handler) ReleaseRun(ctx context.Context, q *executionv1.ReleaseRunRequest) (*emptypb.Empty, error)

+ func (h *Handler) RenewRun(ctx context.Context, q *executionv1.RenewRunRequest) (*executionv1.RunClaimResponse, error)

+ func (h *Handler) ReplaceExecutor(ctx context.Context, q *executionv1.ReplaceExecutorRequest) (*emptypb.Empty, error)

+ func (h *Handler) ReserveSuccessor(ctx context.Context, q *executionv1.ReserveSuccessorRequest) (*executionv1.ReferenceReservationResponse, error)

+ func (h *Handler) RetireEnvironment(ctx context.Context, q *executionv1.RetireEnvironmentRequest) (*emptypb.Empty, error)

+ func (h *Handler) RevokeEnvironment(ctx context.Context, q *executionv1.RevokeEnvironmentRequest) (*executionv1.RevokeEnvironmentResponse, error)

+ func (h *Handler) StartCommand(ctx context.Context, q *executionv1.CommandStartRequest) (*executionv1.CommandStartResponse, error)

+ func (h *Handler) ValidateProfile(ctx context.Context, q *executionv1.ValidateProfileRequest) (*executionv1.ValidateProfileResponse, error)

+ type HandlerConfig struct

+ Clients map[string]ClientPolicy

+ Diagnostics port.Diagnostics

+ Ready func() bool

+ Security *SecurityManager

+ Signer GrantSigner

+ Verifier executionenv.GrantVerifier

+ type PodExecutor struct

+ func NewPodExecutor(config *rest.Config, kube kubernetes.Interface, namespace string) *PodExecutor

+ func (p *PodExecutor) Execute(ctx context.Context, pod string, q executionenv.ExecutorRequest) (executionenv.ExecutorResponse, error)

+ type Profile struct

+ Capabilities []string

+ Digest string

+ MaxCommandBytes int64

+ MaxCommandDuration time.Duration

+ MaxFileBytes int64

+ Name string

+ type ProfileSpec struct

+ CPULimit string

+ CPURequest string

+ EphemeralStorageLimit string

+ EphemeralStorageRequest string

+ Image string

+ ImagePullSecrets []string

+ MaxCommandBytes int64

+ MaxCommandDuration time.Duration

+ MaxEnvironments int

+ MaxFileBytes int64

+ MemoryLimit string

+ MemoryRequest string

+ NodeSelector map[string]string

+ RuntimeClassName string

+ StorageClass string

+ StorageSize string

+ TmpSizeLimit string

+ Tolerations []corev1.Toleration

+ type Profiles struct

+ func LoadProfiles(path string) (*Profiles, error)

+ func (p *Profiles) WithExecutorServiceAccount(name string) *Profiles

+ type ProfilesFile struct

+ Profiles map[string]ProfileSpec

+ type RPCLimiter struct

+ func NewRPCLimiter(security *SecurityManager, globalMax, clientMax int) (*RPCLimiter, error)

+ func (l *RPCLimiter) UnaryInterceptor(ctx context.Context, req any, _ *grpc.UnaryServerInfo, ...) (any, error)

+ type Reconciler struct

+ func NewReconciler(d dynamic.Interface, k kubernetes.Interface, namespace string, p *Profiles) *Reconciler

+ func (r *Reconciler) Initialize(ctx context.Context) error

+ func (r *Reconciler) ReadinessReason() string

+ func (r *Reconciler) Ready() bool

+ func (r *Reconciler) Reconcile(ctx context.Context, name string) error

+ func (r *Reconciler) Run(ctx context.Context) error

+ type SecurityManager struct

+ func NewSecurityManager(manifestPath, keyDirectory, namespace, configMap string, ...) *SecurityManager

+ func (m *SecurityManager) CheckReady(ctx context.Context) bool

+ func (m *SecurityManager) Ready() bool

+ func (m *SecurityManager) Reload(ctx context.Context) error

+ func (m *SecurityManager) Run(ctx context.Context, interval time.Duration)

+ func (m *SecurityManager) TLSConfig() *tls.Config

+ type Store struct

+ func NewStore(client dynamic.Interface, namespace string, profiles *Profiles, ...) *Store

+ func (*Store) CancelCommand(context.Context, string, string, executionenv.CommandQueryRequest) (executionenv.CommandStatusResponse, error)

+ func (*Store) CommandStatus(context.Context, string, string, executionenv.CommandQueryRequest) (executionenv.CommandStatusResponse, error)

+ func (s *Store) AbortReference(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) AcquireRun(ctx context.Context, ref executionenv.EnvironmentRef, ...) (executionenv.RunClaim, error)

+ func (s *Store) Attach(ctx context.Context, ref executionenv.EnvironmentRef, ...) (Allocation, error)

+ func (s *Store) CancelReferenceDelete(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) CommitReference(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) ConfirmReferenceDelete(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) DeleteRetiredEnvironment(ctx context.Context, q adminLifecycleRequest) error

+ func (s *Store) Ensure(ctx context.Context, client, owner, binding, profile, fp string) (Allocation, error)

+ func (s *Store) EnsurePending(ctx context.Context, client, owner, binding, profile, fp, operationID string) (Allocation, error)

+ func (s *Store) EnsurePendingOwned(ctx context.Context, client, expectedOwnerHash string, ...) (Allocation, error)

+ func (s *Store) File(ctx context.Context, client, owner string, q executionenv.FileRequest) (executionenv.FileResponse, error)

+ func (s *Store) FindReferenceIntent(ctx context.Context, ref executionenv.EnvironmentRef, ...) (executionenv.ReferenceIntent, error)

+ func (s *Store) ListReferenceIntents(ctx context.Context, client, owner string, limit int) ([]executionenv.ReferenceIntent, error)

+ func (s *Store) ListReferenceIntentsForClient(ctx context.Context, client string, limit int) ([]executionenv.ReferenceIntent, error)

+ func (s *Store) MigrateEnvironment(ctx context.Context, q adminLifecycleRequest) error

+ func (s *Store) PrepareReferenceDelete(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) RecoverEnvironment(ctx context.Context, q adminLifecycleRequest) error

+ func (s *Store) ReleaseReference(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) ReleaseRun(ctx context.Context, ref executionenv.EnvironmentRef, client, owner string, ...) error

+ func (s *Store) RenewRun(ctx context.Context, ref executionenv.EnvironmentRef, client, owner string, ...) (executionenv.RunClaim, error)

+ func (s *Store) ReplaceExecutor(ctx context.Context, q adminLifecycleRequest) error

+ func (s *Store) ReserveSuccessor(ctx context.Context, ref executionenv.EnvironmentRef, ...) error

+ func (s *Store) RetireExact(ctx context.Context, q adminLifecycleRequest) error

+ func (s *Store) RevokeEnvironment(ctx context.Context, q adminLifecycleRequest, expected uint64) (uint64, error)

+ func (s *Store) StartCommand(ctx context.Context, client, owner string, q executionenv.CommandStartRequest) (executionenv.CommandStartResponse, error)

+ func (s *Store) ValidateProfile(_ context.Context, name string) (Profile, error)

+ func (s *Store) ValidateRunClaim(ctx context.Context, client, owner string, rc executionenv.RequestContext) error

+ func (s *Store) WithKubeClient(kube kubernetes.Interface) *Store