Help us shape the future of Go! Take the 2026 Go Developer Survey

linseed

package
v1.38.11 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 23, 2026 License: Apache-2.0 Imports: 27 Imported by: 0

Documentation

Index

Constants

View Source
const (
	DeploymentName                                         = "tigera-linseed"
	ServiceAccountName                                     = "tigera-linseed"
	PolicyName                                             = networkpolicy.TigeraComponentPolicyPrefix + "linseed-access"
	PortName                                               = "tigera-linseed"
	TargetPort                                             = 8444
	Port                                                   = 443
	ClusterRoleName                                        = "tigera-linseed"
	MultiTenantManagedClustersAccessClusterRoleBindingName = "tigera-linseed-managed-cluster-access"
)

Variables

This section is empty.

Functions

func Linseed

func Linseed(c *Config) render.Component

func LinseedNamespace added in v1.33.0

func LinseedNamespace(tenant *operatorv1.Tenant) string

LinseedNamespace determine the namespace in which Linseed is running. For management and standalone clusters, this is always the tigera-elasticsearch namespace. For multi-tenant management clusters, this is the tenant namespace

Types

type Config

type Config struct {
	// CustomResources provided by the user.
	Installation *operatorv1.InstallationSpec

	// Pull secrets provided by the user.
	PullSecrets []*corev1.Secret

	// Keypair to use for asserting Linseed's identity.
	KeyPair certificatemanagement.KeyPairInterface

	// Keypair to use for signing tokens.
	TokenKeyPair certificatemanagement.KeyPairInterface

	// Trusted bundle to use when validating client certificates.
	TrustedBundle certificatemanagement.TrustedBundleRO

	// ClusterDomain to use when building service URLs.
	ClusterDomain string

	// Whether this is a management cluster
	ManagementCluster bool

	// Elastic cluster configuration
	ESClusterConfig *relasticsearch.ClusterConfig

	// Indicates whether DPI is installed in the cluster or not
	HasDPIResource bool

	// Namespace to install into.
	Namespace string

	// Namespaces to which we must bind the Linseed cluster role.
	BindNamespaces []string

	// Tenant configuration, if running for a particular tenant.
	Tenant          *operatorv1.Tenant
	ExternalElastic bool

	// Secret containing client certificate and key for connecting to the Elastic cluster. If configured,
	// mTLS is used between Linseed and the external Elastic cluster.
	ElasticClientSecret *corev1.Secret

	// Secret containing the user linseed connects to Elasticsearch
	// In a zero tenant setup, es-kubecontrollers create this secret
	// In a multi-tenant setup, users controllers create this secret
	ElasticClientCredentialsSecret *corev1.Secret

	ElasticHost string
	ElasticPort string

	LogStorage *operatorv1.LogStorage
}

Config contains all the information needed to render the Linseed component.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL