controllers

Documentation

Index

• type ClusterwideNetworkPolicyReconciler
  • func (r *ClusterwideNetworkPolicyReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error)
  • func (r *ClusterwideNetworkPolicyReconciler) SetupWithManager(mgr ctrl.Manager) error
• type DroptailerReconciler
  • func (r *DroptailerReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error)
  • func (r *DroptailerReconciler) SetupWithManager(mgr ctrl.Manager) error
• type FirewallReconciler
  • func (r *FirewallReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error)
  • func (r *FirewallReconciler) SetupWithManager(mgr ctrl.Manager) error

Types

type ClusterwideNetworkPolicyReconciler

type ClusterwideNetworkPolicyReconciler struct {
	client.Client
	Log    logr.Logger
	Scheme *runtime.Scheme
	// contains filtered or unexported fields
}

ClusterwideNetworkPolicyReconciler reconciles a ClusterwideNetworkPolicy object +kubebuilder:rbac:groups=metal-stack.io,resources=events,verbs=create;patch

func (*ClusterwideNetworkPolicyReconciler) Reconcile

func (r *ClusterwideNetworkPolicyReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error)

Reconcile ClusterwideNetworkPolicy and creates nftables rules accordingly +kubebuilder:rbac:groups=metal-stack.io,resources=clusterwidenetworkpolicies,verbs=get;list;watch;create;update;patch;delete +kubebuilder:rbac:groups=metal-stack.io,resources=clusterwidenetworkpolicies/status,verbs=get;update;patch

func (*ClusterwideNetworkPolicyReconciler) SetupWithManager

func (r *ClusterwideNetworkPolicyReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager configures this controller to watch for ClusterwideNetworkPolicy CRD

type DroptailerReconciler

type DroptailerReconciler struct {
	client.Client
	Log       logr.Logger
	Scheme    *runtime.Scheme
	HostsFile string
	// contains filtered or unexported fields
}

DroptailerReconciler reconciles a Droptailer object

func (*DroptailerReconciler) Reconcile

func (r *DroptailerReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error)

Reconcile droptailer with certificate and droptailer-server ip from pod inspection +kubebuilder:rbac:groups=metal-stack.io,resources=Droptailers,verbs=get;list;watch;create;update;patch;delete +kubebuilder:rbac:groups=metal-stack.io,resources=Droptailers/status,verbs=get;update;patch

func (*DroptailerReconciler) SetupWithManager

func (r *DroptailerReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager configure this controller with required defaults

type FirewallReconciler

type FirewallReconciler struct {
	client.Client

	Log          logr.Logger
	Scheme       *runtime.Scheme
	ServiceIP    string
	PrivateVrfID int64
	// contains filtered or unexported fields
}

FirewallReconciler reconciles a Firewall object

func (*FirewallReconciler) Reconcile

func (r *FirewallReconciler) Reconcile(req ctrl.Request) (ctrl.Result, error)

Reconcile reconciles a firewall by: - reading ClusterwideNetworkPolicies and Services of type Loadbalancer - rendering nftables rules - updating the firewall object with nftable rule statistics grouped by action +kubebuilder:rbac:groups=metal-stack.io,resources=firewalls,verbs=get;list;watch;create;update;patch;delete +kubebuilder:rbac:groups=metal-stack.io,resources=firewalls/status,verbs=get;update;patch

func (*FirewallReconciler) SetupWithManager

func (r *FirewallReconciler) SetupWithManager(mgr ctrl.Manager) error

SetupWithManager configures this controller to watch for the CRDs in a specific namespace