allowlistsynchronizer

Documentation

Overview

Package allowlistsynchronizer contains helpers to manage the AllowlistSynchronizer CRD required by GKE Autopilot clusters.

Index

• Constants
• Variables
• func CreateAllowlistSynchronizer(version, partOfLabel string)
• func CreateCSIAllowlistSynchronizer(version, partOfLabel string)
• type AllowlistSynchronizer
  • func (in *AllowlistSynchronizer) DeepCopyObject() runtime.Object
• type AllowlistSynchronizerSpec

Constants

const DefaultCSIWorkloadAllowlistVersion = "v1.1.0"

DefaultCSIWorkloadAllowlistVersion is the default version of the Datadog CSI driver daemonset WorkloadAllowlist.

const DefaultWorkloadAllowlistVersion = "v1.0.5"

DefaultWorkloadAllowlistVersion is the default version of the Datadog daemonset WorkloadAllowlist. v1.0.5 includes the system-probe / NPM exemptions required by the NPM feature on GKE Autopilot.

Variables

var (
	SchemeGroupVersion = schema.GroupVersion{
		Group:   "auto.gke.io",
		Version: "v1",
	}

	SchemeBuilder = runtime.NewSchemeBuilder(func(scheme *runtime.Scheme) error {
		scheme.AddKnownTypes(SchemeGroupVersion, &AllowlistSynchronizer{})
		metav1.AddToGroupVersion(scheme, SchemeGroupVersion)
		return nil
	})
)

Functions

func CreateAllowlistSynchronizer

func CreateAllowlistSynchronizer(version, partOfLabel string)

CreateAllowlistSynchronizer creates a GKE AllowlistSynchronizer Custom Resource (auto.gke.io/v1) for the Datadog WorkloadAllowlist if it doesn't exist. The AllowlistSynchronizer is needed so that GKE Autopilot can sync the Datadog WorkloadAllowlist to the cluster. See the CRD reference: https://cloud.google.com/kubernetes-engine/docs/reference/crds/allowlistsynchronizer

version selects the WorkloadAllowlist YAML to point at. Pass an empty string to use DefaultWorkloadAllowlistVersion. Malformed versions also fall back to the default.

func CreateCSIAllowlistSynchronizer

func CreateCSIAllowlistSynchronizer(version, partOfLabel string)

CreateCSIAllowlistSynchronizer creates a GKE AllowlistSynchronizer Custom Resource (auto.gke.io/v1) for the Datadog CSI driver WorkloadAllowlist if it doesn't exist.

version selects the Datadog CSI driver WorkloadAllowlist YAML to point at. Pass an empty string to use DefaultCSIWorkloadAllowlistVersion. Malformed versions also fall back to the default.

Types

type AllowlistSynchronizer

type AllowlistSynchronizer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata"`

	Spec AllowlistSynchronizerSpec `json:"spec"`
}

func (*AllowlistSynchronizer) DeepCopyObject

func (in *AllowlistSynchronizer) DeepCopyObject() runtime.Object

type AllowlistSynchronizerSpec

type AllowlistSynchronizerSpec struct {
	AllowlistPaths []string `json:"allowlistPaths,omitempty"`
}