controller

Documentation

Index

• type ControllerConfig
• type IPsecCSRSignerConfig
• type MulticlusterConfig
• type NodeIPAMConfig

Types

type ControllerConfig

type ControllerConfig struct {
	// FeatureGates is a map of feature names to bools that enable or disable experimental features.
	FeatureGates map[string]bool `yaml:"featureGates,omitempty"`
	// clientConnection specifies the kubeconfig file and client connection settings for the
	// antrea-controller to communicate with the Kubernetes apiserver.
	ClientConnection componentbaseconfig.ClientConnectionConfiguration `yaml:"clientConnection"`
	// APIPort is the port for the antrea-controller APIServer to serve on.
	// Defaults to 10349.
	APIPort int `yaml:"apiPort,omitempty"`
	// Enable metrics exposure via Prometheus. Initializes Prometheus metrics listener
	// Defaults to true.
	EnablePrometheusMetrics *bool `yaml:"enablePrometheusMetrics,omitempty"`
	// Indicates whether to use auto-generated self-signed TLS certificate.
	// If false, a Secret named "antrea-controller-tls" must be provided with the following keys:
	//   ca.crt: <CA certificate>
	//   tls.crt: <TLS certificate>
	//   tls.key: <TLS private key>
	// Defaults to true.
	SelfSignedCert *bool `yaml:"selfSignedCert,omitempty"`
	// Cipher suites to use.
	TLSCipherSuites string `yaml:"tlsCipherSuites,omitempty"`
	// TLS min version.
	TLSMinVersion string `yaml:"tlsMinVersion,omitempty"`
	// ClientCAFile is the file path of the certificate bundle for all the signers that is recognized for incoming
	// client certificates.
	ClientCAFile string `yaml:"clientCAFile,omitempty"`
	// Legacy CRD mirroring (deprecated).
	LegacyCRDMirroring *bool `yaml:"legacyCRDMirroring,omitempty"`
	// Provide the address of Kubernetes apiserver, to override any value provided in kubeconfig or InClusterConfig.
	// It is typically used when kube-proxy is not deployed (replaced by AntreaProxy) and kube-controller-manager
	// does not run NodeIPAMController (replaced by Antrea NodeIPAM).
	// Defaults to "". It must be a host string, a host:port pair, or a URL to the base of the apiserver.
	KubeAPIServerOverride string `yaml:"kubeAPIServerOverride,omitempty"`
	// NodeIPAM Configuration
	NodeIPAM NodeIPAMConfig `yaml:"nodeIPAM"`
	// IPsec CSR signer configuration
	IPsecCSRSignerConfig IPsecCSRSignerConfig `yaml:"ipsecCSRSigner"`
	// Multicluster configuration options.
	Multicluster MulticlusterConfig `yaml:"multicluster,omitempty"`
}

type IPsecCSRSignerConfig

type IPsecCSRSignerConfig struct {
	// Indicates whether to use auto-generated self-signed CA certificate.
	// If false, a Secret named "antrea-ipsec-ca" must be provided with the following keys:
	//   tls.crt: <CA certificate>
	//   tls.key: <CA private key>
	// Defaults to true.
	SelfSignedCA *bool `yaml:"selfSignedCA,omitempty"`
	// Antrea signer auto approve policy.
	// Defaults to true.
	AutoApprove *bool `yaml:"autoApprove,omitempty"`
}

type MulticlusterConfig

type MulticlusterConfig struct {
	// Enable Multi-cluster NetworkPolicy, including ingress rules that select peers from all
	// clusters in a ClusterSet, and egress rules that select Multi-cluster Services.
	EnableStretchedNetworkPolicy bool `yaml:"enableStretchedNetworkPolicy,omitempty"`
	// The Namespace where the Antrea Multi-cluster Controller is running.
	// The default is antrea-agent's Namespace.
	Namespace string `yaml:"namespace,omitempty"`
}

type NodeIPAMConfig

type NodeIPAMConfig struct {
	// Enable the integrated node IPAM controller within the Antrea controller.
	// Defaults to false.
	EnableNodeIPAM bool `yaml:"enableNodeIPAM,omitempty"`
	// CIDR ranges for Pods in cluster. String array containing single CIDR range, or multiple ranges. The CIDRs could
	// be either IPv4 or IPv6. At most one CIDR may be specified for each IP family. Value ignored when EnableNodeIPAM
	// is false.
	ClusterCIDRs []string `yaml:"clusterCIDRs,omitempty"`
	// CIDR ranges for Services in cluster. It is not necessary to specify it when there is no overlap with clusterCIDRs.
	// Value ignored when EnableNodeIPAM is false.
	ServiceCIDR   string `yaml:"serviceCIDR,omitempty"`
	ServiceCIDRv6 string `yaml:"serviceCIDRv6,omitempty"`
	// Mask size for IPv4 Node CIDR in IPv4 or dual-stack cluster. Value ignored when EnableNodeIPAM is false
	// or when IPv4 Pod CIDR is not configured.
	NodeCIDRMaskSizeIPv4 int `yaml:"nodeCIDRMaskSizeIPv4,omitempty"`
	// Mask size for IPv6 Node CIDR in IPv6 or dual-stack cluster. Value ignored when EnableNodeIPAM is false
	// or when IPv6 Pod CIDR is not configured.
	NodeCIDRMaskSizeIPv6 int `yaml:"nodeCIDRMaskSizeIPv6,omitempty"`
}