api

package
v0.0.0-...-d7a6171 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Sep 9, 2019 License: Apache-2.0 Imports: 6 Imported by: 0

Documentation

Overview

Package api implements the api used by gke-tf. It allows for a user to define a GKE Cluster in yaml.

An example YAML document: 

	kind: gke-cluster
	metadata:
  	  name: "test-cluster"
	spec:
	  zones:
	    - us-west1-c
	    - us-west1-b
	  private: false
	  region: "us-west1"
	  regional: false
	  addons:
	    istio: true
	    logging: true
	    monitoring: true
	    networkPolicy: true
	    podSecurityPolicy: false
	    hpa: true
	    vpa: false
	    autoscaling: false
	    binaryAuth: true
	    httpLoadBalancing: true
	  network:
	    metadata:
	      name: my-network
	    spec:
	      subnetName: my-subnet
	      subnetRange: "10.0.0.0/24"
	      podSubnetRange: "10.1.0.0/16"
	      serviceSubnetRange: "10.2.0.0/20"
	  version: 1.13.5-gke.10
	  nodePools:
	    - metadata:
	    name: my-node-pool
	    spec:
	      initialNodeCount: 1
	      machineType: n1-standard-1
	      diskSizeGB: 50
	    - metadata:
	      name: my-other-nodepool
	    spec:
	      initialNodeCount: 1
	      machineType: n1-standard-1
	      diskSizeGB: 50
	      diskType: pd-standard
	      tags:
	        - red
	        - white
	  tags:
	    - blue
	    - green

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func SetApiDefaultValues 

func SetApiDefaultValues(gkeTF *GkeTF, configFile string) error

SetApiDefaultValues creates default ClusterSpec and its children and merges the default values into the clusterSpec values parsed from the user provided YAML. This func allows for gen to provide default values as set in api.ClusterSpec definition.

func ValidateYamlInput 

func ValidateYamlInput(gkeTF *GkeTF) error

ValidateYamlInput checks the values that the user passes in via the yaml file.

Types

type AddonsSpec 

type AddonsSpec struct {
	// Istio installs managed istio on the cluster.
	// Default value for Istio is false
	// See: https://cloud.google.com/istio/docs/istio-on-gke/overview
	Istio string `yaml:"istio,omitempty" default:"true" validate:"eq=true|eq=false"`
	// Cloudrun installs managed Cloudrun on the cluster.
	// Default value for Cloudrun is false
	//
	// See  https://cloud.google.com/run/docs/gke/setup.
	Cloudrun string `yaml:"cloudrun,omitempty" default:"false" validate:"eq=true|eq=false"`
	// Logging enables stack driver logging for the cluster.
	// Default value for Logging is true.
	// Automatically send logs from the cluster to the Google Cloud Logging
	// API.
	// include logging.googleapis.com, logging.googleapis.com/kubernetes
	Logging *string `` /* 142-byte string literal not displayed */
	// Monitoring enables stack driver logging for the cluster.
	// Default value for Monitoring is true.
	//
	// See https://cloud.google.com/monitoring/kubernetes-engine/.
	//
	// Automatically send metrics from pods in the cluster to the Google Cloud
	// Monitoring API. VM metrics will be collected by Google Compute Engine
	// regardless of this setting.
	// monitoring.googleapis.com, monitoring.googleapis.com/kubernetes
	Monitoring *string `` /* 154-byte string literal not displayed */
	// NetworkPolicy enables network policy for the cluster.
	// Enable network policy enforcement for this cluster.
	// Default value for NetworkPolicy is true
	//
	// See https://cloud.google.com/kubernetes-engine/docs/how-to/network-policy.
	NetworkPolicy string `yaml:"networkPolicy,omitempty" default:"true" validate:"eq=true|eq=false"`
	// HPA enables horizontal pod autoscaling for the cluster.
	// Default value for HPA is true
	//
	// See https://cloud.google.com/kubernetes-engine/docs/how-to/scaling-apps.
	HPA string `yaml:"hpa,omitempty" default:"true" validate:"eq=true|eq=false"`
	// VPA enables vertical pod autoscaling for the cluster.
	// Default value for VPA is false.
	//
	// See https://cloud.google.com/kubernetes-engine/docs/concepts/verticalpodautoscaler.
	VPA *bool `yaml:"vpa,omitempty" default:"false"`
	// ClusterAutoscaling enables cluster nodepool autoscaling.
	// Default value Autoscaling is true.
	//
	// See https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler
	ClusterAutoscaling *bool `yaml:"clusterAutoscaling,omitempty" default:"true"`
	// BinaryAuth enables binary authorization for the cluster.
	// Default value BinaryAuth is true.
	//
	// See https://cloud.google.com/binary-authorization/docs/.
	BinaryAuth *bool `yaml:"binaryAuth,omitempty" default:"true"`

	// HTTPLoadBalancing enables HTTP Load Balancing for the cluster.
	// Default value HTTPLoadBalancing is true.
	// TODO figure out what this actually is, cannot find it in gcloud
	HTTPLoadBalancing *bool `yaml:"httpLoadBalancing,omitempty" default:"true"`
	// PodSecurityPolicy enables Pod Security Policy for the Cluster.
	// Default value PodSecurityPolicy is false.
	// Enables the pod security policy admission controller for the cluster.
	// The pod security policy admission controller adds fine-grained pod
	// create and update authorization controls through the PodSecurityPolicy
	//
	// API objects. For more information, see
	//
	// https://cloud.google.com/kubernetes-engine/docs/how-to/pod-security-policies.
	PodSecurityPolicy *bool `yaml:"podSecurityPolicy,omitempty" default:"false"`
}

AddonsSpec is struct that contains multiple bool flags that are used to denote which addons are to be installed. See the following URLS for more information about the various addons.

- https://cloud.google.com/istio/docs/istio-on-gke/overview

- https://cloud.google.com/run/docs/gke/setup

- https://cloud.google.com/monitoring/kubernetes-engine/

- https://cloud.google.com/kubernetes-engine/docs/how-to/network-policy

- https://cloud.google.com/kubernetes-engine/docs/how-to/scaling-apps

- https://cloud.google.com/kubernetes-engine/docs/concepts/verticalpodautoscaler

- https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler

- https://cloud.google.com/kubernetes-engine/docs/how-to/pod-security-policies

- https://cloud.google.com/binary-authorization/docs/

type BastionSpec 

type BastionSpec struct {
	// Zone defines the zone where the bastion host is created.
	Zone string `yaml:"zone" validate:"required"`
}

BastionSpec includes the base information for a bastion host that is used with a private cluster.

type ClusterSpec 

type ClusterSpec struct {
	// The GCP ProjectId that is used to host the GKE cluster.
	ProjectId string `yaml:"projectId" validate:"required"`
	// Create a private GKE cluster.
	Private string `yaml:"private,omitempty" default:"true" validate:"eq=true|eq=false"`
	// Region is the GCP Region that is used for the network and if a regional cluster is created
	// it is used for that as well.
	Region string `yaml:"region" validate:"required"` // TODO validate that if it is not a regional cluster, then we need zones
	// Addons is struct that contains multiple bool flags that are used to deno which addons are to be installed.
	Addons *AddonsSpec `yaml:"addons" validate:"required"`
	// Network is a NetworkSpec struct that contains the details about the Network that will be created for the GKE Cluster.
	Network *GkeNetwork `yaml:"network" validate:"required,dive"`
	// Version is the base version for the cluster. This value defaults to 'latest'.
	// This value will be used for the GKE nodepools as well, unless a nodepool has a version.
	Version string `yaml:"version" default:"latest" validate:"required"`
	// Regional denotes if the GKE cluster will be created as a regional cluster.
	Regional string `yaml:"regional,omitempty" default:"true" validate:"eq=true|eq=false"`

	// RemoveDefaultNodePool enables the removal of the default GKE nodepool, which is the best practice.
	RemoveDefaultNodePool *bool `yaml:"removeDefaultNodePool,omitempty" default:"true"`

	// Zones are the GCP zones that the cluster runs inside of.
	Zones *[]string `yaml:"zones"`
	// Taints are a slice TaintSpec that model Kubernetes taints that are applied to all nodes.
	Taints *[]TaintSpec `yaml:"taints" validate:"omitempty,dive"`
	// OauthScopes is a slice of oauth scopes that are applied to a all nodes.  This slice defaults to the base required oauth
	// scopes.
	OauthScopes *[]string `` /* 298-byte string literal not displayed */
	// Tags is a slice of tags that are applied to all nodes.
	Tags *[]string `yaml:"tags"`

	// Labels is a map of labels that are applied to all node.  Labels are in the form of key and value strings.
	Labels *map[string]string `yaml:"labels" validate:"omitempty"`
	// NodePools is a slice of NodePoolSpec struts that models a nodepool in GKE.
	NodePools *[]*GkeNodePool `yaml:"nodePools" validate:"required,dive"`
	// Metadata is a map of GCP compute instance metadata that will be applied to all compute instances.
	// This allows you to do things like start scripts.
	Metadata *map[string]string `yaml:"metadata" validate:"omitempty,dive"`

	// Description of the cluster.
	Description *string `yaml:"Description"`

	IpMasqLinkLocal     *string `yaml:"ipMasqLinkLocal"`
	IpMasqRsyncInterval *string `yaml:"ipMasqRsyncInterval"`
	// RFC3339 format
	MaintenanceStartTime *string `yaml:"maintenanceStartTime"`

	IssueClientCertificate *string `yaml:"IssueClientCertificate" default:"false"`

	// MasterAuthorizedNetworksConfig is a slice of the desired configuration options for master authorized networks.
	// Omit the nested cidr_blocks attribute to disallow external access (except the cluster node IPs, which GKE automatically whitelists)
	MasterAuthorizedNetworksConfig *[]MasterAuthorizedNetworksConfigSpec `yaml:"masterAuthorizedNetworksConfig" validate:"omitempty,dive"`

	// Export cluster resource usage to an external database. e.g. BigQuery
	ResourceUsageExportConfig *ResourceUsageExportConfigSpec `yaml:"resourceUsageExportConfig" validate:"omitempty,dive"`
	// StubDomains and their resolvers to forward DNS queries for a certain domain to an external DNS server.
	StubDomains *[]StubDomainsSpec `yaml:"stubDomains" validate:"omitempty,dive"`

	// DatabaseEncryption allows a user to configure etcd database encyptions using a provided KMS key name.
	DatabaseEncryption *DatabaseEncryptionSpec `yaml:"databaseEncryption" validate:"omitempty,dive"`

	// NodeVersion is the default kubernetes version of nodes in the node pools.
	NodeVersion *string `yaml:"nodeVersion"`

	// ServiceAccount is the name of the service account to use for the cluster, or can hold the value "create".
	// This value defaults to the value "create", which creates a new service account for the cluster.
	ServiceAccount *string `yaml:"serviceAccount" default:"create"`

	// Workload Identity
	// This enables WI at the cluster level.  Requires WorkloadMetadataConfig spec on each node pool.
	// https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
	WorkloadIdentityConfig *WorkloadIdentityConfigSpec `yaml:"workloadIdentityConfig" validate:"omitempty,dive"`

	// TODO check if we have this
	DeployUsingPrivateEndpoint *bool `yaml:"deployUsingPrivateEndpoint"`

	// DefaultMaxPodsPerNode for all node pools. Controls the subnet slicing per node.  See
	// https://cloud.google.com/kubernetes-engine/docs/how-to/flexible-pod-cidr
	// This value defaults to 110.
	DefaultMaxPodsPerNode int16 `yaml:"defaultMaxPodsPerNode" default:"110" validate:"gte=8,lte=110"`

	// Enable TPU support
	// https://cloud.google.com/tpu/docs/kubernetes-engine-setuphttps://cloud.google.com/tpu/docs/kubernetes-engine-setup
	Tpu string `yaml:"tpu,omitempty" default:"false" validate:"eq=true|eq=false"`

	// Enable Kubernetes Alpha support
	// https://cloud.google.com/kubernetes-engine/docs/concepts/alpha-clusters
	Alpha string `yaml:"alpha,omitempty" default:"false" validate:"eq=true|eq=false"`

	// Enable IntraNodeVisibility
	// https://cloud.google.com/kubernetes-engine/docs/how-to/intranode-visibility
	// Requires enabling VPC flow logs on the subnet first
	IntraNodeVisibility string `yaml:"intraNodeVisibility,omitempty" default:"false" validate:"eq=true|eq=false"`

	// Bastion defines configuration specific for the bastion created with a private clusters.
	Bastion *GkeBastion `yaml:"bastion,omitempty"` // TODO validate
}

ClusterSpec API struct that represents a cluster.

type DatabaseEncryptionSpec 

type DatabaseEncryptionSpec struct {
	// State can be two different values "ENCRYPTED", "DECRYPTED".
	State *string `yaml:"state" validate:"required,eq=ENCRYPTED|eq=DECRYPTED"`
	// Keyname is the name of the KMS key.
	KeyName *string `yaml:"keyName" validate:"required"`
}

type GkeBastion 

type GkeBastion struct {
	TypeMeta   `yaml:",inline"`
	ObjectMeta `yaml:"metadata,omitempty"`

	// BastionSpec includes the base information for a bastion host that is used with a private cluster. This allows a user to define the zone for a bastion, if not defined the zone will default to the "a" zone.
	Spec BastionSpec `yaml:"spec" validate:"required,dive"`
}

GkeBastion wraps a BastionSpec.

type GkeNetwork 

type GkeNetwork struct {
	TypeMeta   `yaml:",inline"`
	ObjectMeta `yaml:"metadata,omitempty"`

	// ClusterSpec include the base information modeling a Network for a GKE Cluster.
	Spec NetworkSpec `yaml:"spec" validate:"required,dive"`
}

GkeNetwork wraps a NetworkSpec.

type GkeNodePool 

type GkeNodePool struct {
	TypeMeta   `yaml:",inline"`
	ObjectMeta `yaml:"metadata,omitempty"`

	// ClusterSpec include the base information modeling a NodePool for a GKE Cluster.
	Spec NodePoolSpec `yaml:"spec,omitempty" validate:"required,dive"`
}

GkeNetwork wraps a NodePoolSpec.

type GkeTF 

type GkeTF struct {
	TypeMeta   `yaml:",inline"`
	ObjectMeta `yaml:"metadata,omitempty"`
	// ClusterSpec include the base information modeling a GKE Cluster.
	Spec ClusterSpec `yaml:"spec" validate:"required,dive"`
}

GkeTF is the base layer for the API. It includes a ClusterSpec and other obligatory information.

func UnmarshalGkeTF 

func UnmarshalGkeTF(configFile string) (gkeTf *GkeTF, err error)

unmarshalConfigurationFile reads the YAML file, configFile, and executes yaml.UnmarshalStrict, loading the value into spec.

type MasterAuthorizedNetworksConfigSpec 

type MasterAuthorizedNetworksConfigSpec struct {
	// CidrBlock stores the CIDR
	CidrBlock *string `yaml:"cidrBlock" validate:"cidrv4"`
	// DisplayName is the display_name in terraform.
	DisplayName *string `yaml:"displayName" validate:"required"`
}

MasterAuthorizedNetworksConfigSpec models the desired configuration options for master authorized networks.

type NetworkSpec 

type NetworkSpec struct {
	// SubnetName is the name of the GCP Subnet that is created.
	SubnetName string `yaml:"subnetName" validate:"required"`
	// SubnetRange is the base range for the GKE Nodes.
	SubnetRange string `yaml:"subnetRange" validate:"required,cidrv4"` // TODO calculate these based on nodes
	// PodSubnetRange is the ip aliased range used for GKE pods.
	PodSubnetRange string `yaml:"podSubnetRange" validate:"required,cidrv4"`
	// ServiceSubnetRange is the service subnet that is aliased.
	ServiceSubnetRange string `yaml:"serviceSubnetRange" validate:"required,cidrv4"`
	// The IP range in CIDR notation to use for the hosted master network
	MasterIPV4CIDRBlock string `yaml:"masterIPV4CIDRBlock" validate:"cidrv4"`
}

NetworkSpec API struct represents a network and subnet that is used for a GKE cluster.

type NodePoolSpec 

type NodePoolSpec struct {

	// MinCount of the nodepool.
	// This value defaults to 1 and must be less than MaxCount
	MinCount int16 `yaml:"minCount" default:"1" validate:"gte=0,ltefield=MaxCount"`
	// MaxCount of the nodepool.
	// This value defaults to 1.
	MaxCount int16 `yaml:"maxCount" default:"1" validate:"gtefield=MinCount,lte=2000"`
	// MaxPodsPerNode of the nodepool. Controls the subnet slicing per node.  See
	// https://cloud.google.com/kubernetes-engine/docs/how-to/flexible-pod-cidr
	// This value defaults to 110.
	MaxPodsPerNode int16 `yaml:"maxPodsPerNode" default:"110" validate:"gte=8,lte=110"`
	// MachineType of the nodepool, which defaults to a n1-standard-1. See
	// https://cloud.google.com/compute/docs/machine-types for more information about
	// GCP machine types.
	MachineType string `yaml:"machineType" default:"n1-standard-1"`
	// AutoRepair enables GKE's node auto-repair feature that helps keeping the nodes in your
	// cluster in a healthy, running state.
	// See https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-repair.
	// This feature defaults to true, by default, and is enabled.
	AutoRepair *bool `yaml:"autoRepair,omitempty" default:"true"`
	// AutoUpgrade enables Node auto-upgrades help you keep the nodes in your cluster up to date
	// with the cluster master version when your master is updated on your behalf.
	// See https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-upgrades.
	// This feature defaults to false, and not enabled.
	AutoUpgrade *bool `yaml:"autoUpgrade,omitempty" default:"false"`
	// Preemptible causes the nodepool create with Preemptible VMs which are Google
	// Compute Engine VM instances that last a maximum of 24 hours and
	// provide no availability guarantees.
	// See https://cloud.google.com/kubernetes-engine/docs/how-to/preemptible-vms.
	// Preemptible defaults to false.
	Preemptible *bool `yaml:"preemptible" default:"false"`
	// Version is the GKE version for the nodepool.. This value defaults to 'latest'.
	// This value will override the version in the parent struct.
	Version *string `yaml:"version,omitempty"`
	// DiskSizeGB is the node disk size.
	// This value defaults to 100.
	DiskSizeGB int `yaml:"diskSizeGB" default:"100", validate:"gte=10,lte=65536"`
	// DiskType is the node disk type.
	// Values can be pd-ssd or pd-standard, and it defaults to pd-ssd.
	DiskType string `yaml:"diskType" default:"pd-ssd" validate:"eq=pd-ssd|eq=pd-standard"`
	// LocalSSDCount is the number of 375GB SSDs attached to each GKE worker node as extra
	// scratch space.  These are not formatted and must be configured via daemonset or other
	// means to be useful.
	LocalSSDCount int `yaml:"localSSDCount" default:"0" validate:"gte=0,lte=2"`
	// ImageType is the node operating system.
	// See https://cloud.google.com/kubernetes-engine/docs/concepts/node-images.
	// Values can be COS, COS_CONTAINERD or UBUNTU, and it defaults to COS..
	ImageType string `yaml:"imageType" default:"COS" validate:"eq=COS|eq=UBUNTU|eq=COS_CONTAINERD"`

	// InitialNodeCount is the number of nodes created at inception of the cluster.
	// This value defaults to 1.
	InitialNodeCount int16 `yaml:"initialNodeCount" validate:"required,ltefield=MaxCount" default:"1"`
	// Min CPU Platform
	// See https://cloud.google.com/kubernetes-engine/docs/how-to/min-cpu-platform
	// Run `gcloud compute zones describe <zone>` and view the `availableCpuPlatforms`
	// Valid values today are "Intel Broadwell" or "Intel Haswell"
	MinCpuPlatform string `yaml:"minCpuPlatform,omitempty" validate="eq='Intel Broadwell'|eq='Intel Haswell'"`

	// Tags slice containing node network tags for this specific nodepool.
	// See https://cloud.google.com/vpc/docs/add-remove-network-tags.
	Tags *[]string `yaml:"tags"` // validate:"omitempty,dive"` // this will cause a panic with validator
	// OauthScopes is a slice of Oauth Scope URLs that are applied to
	// the GCP instances in a nodepool.
	// See https://developers.google.com/identity/protocols/googlescopes
	OauthScopes *[]string `` /* 298-byte string literal not displayed */
	// Taints are a slice of TaintSpec structs.
	// See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ and
	// https://cloud.google.com/kubernetes-engine/docs/how-to/node-taints.
	Taints *[]TaintSpec `yaml:"taints"` // validate:"omitempty,dive"`
	// Labels is a map of GCP instance labels.
	// See https://cloud.google.com/compute/docs/labeling-resources.
	Labels   *map[string]string `yaml:"labels"`
	Metadata *map[string]string `yaml:"metadata"`
	// Workload Metadata is a map of configuration options for securing GKE metadata APIs
	// This setting is per node pool
	WorkloadMetadataConfig *WorkloadMetadataConfigSpec `yaml:"workloadMetadataConfig" validate:"omitempty,dive"`

	AcceleratorType  *string `yaml:"acceleratorType,omitempty"`
	AcceleratorCount int16   `yaml:"acceleratorCount,omitempty"`
	// Specify an existing SA to use for the node pool instead of the one automatically
	// generated for this cluster.
	ServiceAccount *string `yaml:"serviceAccount" validate:"omitempty,email"`
	// Gvisor (GKE Sandbox) - Enabled per node pool
	// https://cloud.google.com/kubernetes-engine/docs/how-to/sandbox-pods
	Gvisor string `yaml:"gvisor" default:"false" validate:"eq=true|eq=false"`
}

NodePoolSpec API struct that represents a GKE Nodepool.

type ObjectMeta 

type ObjectMeta struct {
	// Name must be unique within a namespace. Is required when creating resources, although
	// some resources may allow a client to request the generation of an appropriate name
	// automatically. Name is primarily intended for creation idempotence and configuration
	// definition.
	Name string `yaml:"name,omitempty" protobuf:"bytes,1,opt,name=name" valdiate:"required"`

	// Map of string keys and values that can be used to organize and categorize
	// (scope and select) objects. May match selectors of replication controllers
	// and services.
	// More info: http://kubernetes.io/docs/user-guide/labels
	// +optional
	Labels map[string]string `yaml:"labels,omitempty" protobuf:"bytes,11,rep,name=labels"`

	// Annotations is an unstructured key value map stored with a resource that may be
	// set by external tools to store and retrieve arbitrary metadata. They are not
	// queryable and should be preserved when modifying objects.
	// More info: http://kubernetes.io/docs/user-guide/annotations
	// +optional
	Annotations map[string]string `yaml:"annotations,omitempty" protobuf:"bytes,12,rep,name=annotations"`
}

ObjectMeta is metadata that all resources must have, which includes all objects users must create.

type ResourceUsageExportConfigSpec 

type ResourceUsageExportConfigSpec struct {
	// Enable network egress metering
	EnableNetworkEgressMetering *string `yaml:"enableNetworkEgressMetering" default: "false" validate:"eq=false|eq=true"`
	// The BigQuery dataset to send data to
	DatasetId *string `yaml:"datasetId" validate:"required"`
}

ResourceUsageExportConfig models the desired configuration options for exporting usage to BigQuery

type StubDomainsSpec 

type StubDomainsSpec struct {
	TypeMeta             `yaml:",inline"`
	ObjectMeta           `yaml:"metadata,omitempty"`
	DNSServerIPAddresses []string `yaml:"dnsServerIPAddresses" validate:"required,dive,ipv4"`
}

type TaintSpec 

type TaintSpec struct {
	// Key is the key value in a taint.
	// blah.com/asdf = DNS 1123 Subdomain + slash + up to 63 chars
	// TODO Closely validate Key and Value
	// https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go
	Key string `yaml:"key" validate:"gt=0,lte=250"`
	// Value is the value field in a taint.
	Value string `yaml:"value,omitempty" validate:"lte=63"`
	// Effect is the effect field in a taint.
	// https://www.terraform.io/docs/providers/google/r/container_cluster.html#taint
	// NO_SCHEDULE, PREFER_NO_SCHEDULE, and NO_EXECUTE
	Effect string `yaml:"effect" validate:"eq=NO_SCHEDULE|eq=PREFER_NO_SCHEDULE|eq=NO_EXECUTE`
}

TaintSpec models a Kubernetes Node Taint.

See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ https://cloud.google.com/kubernetes-engine/docs/how-to/node-taints. https://www.terraform.io/docs/providers/google/r/container_cluster.html#taint

For example: 

tolerations:
  - key: "key"
  operator: "Equal"
  value: "value"
  effect: "NoSchedule"

Becomes: taints:

  • key: "key" value: "value" effect: "NO_SCHEDULE"

type TypeMeta 

type TypeMeta struct {
	// Kind is a string value representing the REST resource this object represents.
	// Servers may infer this from the endpoint the client submits requests to.
	Kind string `yaml:"kind,omitempty" protobuf:"bytes,1,opt,name=kind"`

	// APIVersion defines the versioned schema of this representation of an object.
	APIVersion string `yaml:"apiVersion,omitempty" protobuf:"bytes,2,opt,name=apiVersion"`
}

TypeMeta is metadata that all resources must have, which includes all objects users must create.

type WorkloadIdentityConfigSpec 

type WorkloadIdentityConfigSpec struct {
	// The Identity Namespace to use.  Typically "<project-name>.svc.id.goog"
	IdentityNamespace *string `yaml:"identityNamespace" validate:"required"`
}

WorkloadIdentityConfigSpec holds the cluster-scoped setting for which Identity Namespace to use for this cluster https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

type WorkloadMetadataConfigSpec 

type WorkloadMetadataConfigSpec struct {
	// How to expose the node metadata to the workload running on the node.
	// https://www.terraform.io/docs/providers/google/r/container_cluster.html#node_metadata
	NodeMetadata *string `yaml:"nodeMetadata" validate:"required,eq=UNSPECIFIED|eq=EXPOSED|eq=SECURE|eq=GKE_METADATA_SERVER"`
}

Defines how pods on this node pool can interact (or not) with the GCE Metadata APIs. https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity UNSPECIFIED = not set, EXPOSED = off, SECURE = Metadata Concealment, GKE_METADATA_SERVER = workload identity and metadata concealment combined.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.