controller

Documentation

Index

• Variables
• func UpdateConfigMapData(config *opv1.KubeArmorConfigSpec) bool
• func UpdateIfDefinedAndUpdated(common *string, in string) bool
• func UpdateImages(config *opv1.KubeArmorConfigSpec) []string
• func UpdateTlsArguments(args *[]string, action string)
• func UpdateTlsData(config *opv1.KubeArmorConfigSpec) bool
• func UpdatedKubearmorRelayEnv(config *opv1.KubeArmorConfigSpec) bool
• func UpdatedSeccomp(config *opv1.KubeArmorConfigSpec) bool
• type ClusterWatcher
  • func NewClusterWatcher(client *kubernetes.Clientset, log *zap.SugaredLogger, ...) *ClusterWatcher
  • func (clusterWatcher *ClusterWatcher) AreAllNodesProcessed() bool
  • func (clusterWatcher *ClusterWatcher) DeleteAllTlsSecrets() error
  • func (clusterWatcher *ClusterWatcher) RotateTlsCerts()
  • func (clusterWatcher *ClusterWatcher) UpdateCrdStatus(cfg, phase, message string)
  • func (clusterWatcher *ClusterWatcher) UpdateDaemonsets(...)
  • func (clusterWatcher *ClusterWatcher) UpdateKubeArmorConfigMap(cfg *opv1.KubeArmorConfig)
  • func (clusterWatcher *ClusterWatcher) UpdateKubeArmorImages(images []string) error
  • func (clusterWatcher *ClusterWatcher) UpdateKubearmorRelayEnv(cfg *opv1.KubeArmorConfig) error
  • func (clusterWatcher *ClusterWatcher) UpdateKubearmorSeccomp(cfg *opv1.KubeArmorConfig) error
  • func (clusterWatcher *ClusterWatcher) UpdateTlsConfigurations(tlsEnabled bool) error
  • func (clusterWatcher *ClusterWatcher) UpdateTlsVolumeAndVolumeMounts(action string) error
  • func (clusterWatcher *ClusterWatcher) WatchConfigCrd()
  • func (clusterWatcher *ClusterWatcher) WatchNodes()
  • func (clusterWatcher *ClusterWatcher) WatchRequiredResources()
  • func (clusterWatcher *ClusterWatcher) WatchTlsState(tlsEnabled bool) error
• type Node

Variables

var PathPrefix string

Functions

func UpdateConfigMapData

func UpdateConfigMapData(config *opv1.KubeArmorConfigSpec) bool

func UpdateIfDefinedAndUpdated

func UpdateIfDefinedAndUpdated(common *string, in string) bool

func UpdateImages

func UpdateImages(config *opv1.KubeArmorConfigSpec) []string

func UpdateTlsArguments

func UpdateTlsArguments(args *[]string, action string)

func UpdateTlsData

func UpdateTlsData(config *opv1.KubeArmorConfigSpec) bool

func UpdatedKubearmorRelayEnv

func UpdatedKubearmorRelayEnv(config *opv1.KubeArmorConfigSpec) bool

func UpdatedSeccomp

func UpdatedSeccomp(config *opv1.KubeArmorConfigSpec) bool

Types

type ClusterWatcher

type ClusterWatcher struct {
	Nodes          []Node
	NodesLock      *sync.Mutex
	Log            *zap.SugaredLogger
	Client         *kubernetes.Clientset
	ExtClient      *apiextensionsclientset.Clientset
	Opv1Client     *opv1client.Clientset
	Daemonsets     map[string]int
	DaemonsetsLock *sync.Mutex
}

func NewClusterWatcher

func NewClusterWatcher(client *kubernetes.Clientset, log *zap.SugaredLogger, extClient *apiextensionsclientset.Clientset, opv1Client *opv1client.Clientset, pathPrefix, deploy_name string) *ClusterWatcher

func (*ClusterWatcher) AreAllNodesProcessed

func (clusterWatcher *ClusterWatcher) AreAllNodesProcessed() bool

func (*ClusterWatcher) DeleteAllTlsSecrets

func (clusterWatcher *ClusterWatcher) DeleteAllTlsSecrets() error

func (*ClusterWatcher) RotateTlsCerts

func (clusterWatcher *ClusterWatcher) RotateTlsCerts()

func (*ClusterWatcher) UpdateCrdStatus

func (clusterWatcher *ClusterWatcher) UpdateCrdStatus(cfg, phase, message string)

func (*ClusterWatcher) UpdateDaemonsets

func (clusterWatcher *ClusterWatcher) UpdateDaemonsets(action, enforcer, runtime, socket, btfPresent, apparmorfs, seccompPresent string)

func (*ClusterWatcher) UpdateKubeArmorConfigMap

func (clusterWatcher *ClusterWatcher) UpdateKubeArmorConfigMap(cfg *opv1.KubeArmorConfig)

func (*ClusterWatcher) UpdateKubeArmorImages

func (clusterWatcher *ClusterWatcher) UpdateKubeArmorImages(images []string) error

func (*ClusterWatcher) UpdateKubearmorRelayEnv

func (clusterWatcher *ClusterWatcher) UpdateKubearmorRelayEnv(cfg *opv1.KubeArmorConfig) error

func (*ClusterWatcher) UpdateKubearmorSeccomp

func (clusterWatcher *ClusterWatcher) UpdateKubearmorSeccomp(cfg *opv1.KubeArmorConfig) error

func (*ClusterWatcher) UpdateTlsConfigurations

func (clusterWatcher *ClusterWatcher) UpdateTlsConfigurations(tlsEnabled bool) error

func (*ClusterWatcher) UpdateTlsVolumeAndVolumeMounts

func (clusterWatcher *ClusterWatcher) UpdateTlsVolumeAndVolumeMounts(action string) error

func (*ClusterWatcher) WatchConfigCrd

func (clusterWatcher *ClusterWatcher) WatchConfigCrd()

func (*ClusterWatcher) WatchNodes

func (clusterWatcher *ClusterWatcher) WatchNodes()

func (*ClusterWatcher) WatchRequiredResources

func (clusterWatcher *ClusterWatcher) WatchRequiredResources()

func (*ClusterWatcher) WatchTlsState

func (clusterWatcher *ClusterWatcher) WatchTlsState(tlsEnabled bool) error

type Node

type Node struct {
	Name          string
	Enforcer      string
	Runtime       string
	RuntimeSocket string
	Arch          string
	BTF           string
	ApparmorFs    string
	Seccomp       string
}