metal

Documentation

Index

• Constants
• Variables
• type Credentials
  • func ReadCredentialsSecret(secret *corev1.Secret) (*Credentials, error)

Constants

const (
	// Name is the name of the Metal provider.
	Name = "provider-metal"

	// MachineControllerManagerImageName is the name of the MachineControllerManager image.
	MachineControllerManagerImageName = "machine-controller-manager"
	// MCMProviderMetalImageName is the name of the metal provider plugin image.
	MCMProviderMetalImageName = "machine-controller-manager-provider-metal"
	// CCMImageName is the name of the cloud controller manager image.
	CCMImageName = "metalccm"
	// GroupRolebindingControllerImageName is the name of the GroupRolebindingController image
	GroupRolebindingControllerImageName = "group-rolebinding-controller"
	// AccountingExporterImageName is the name of the accounting exporter image
	AccountingExporterImageName = "accounting-exporter"
	// AuthNWebhookImageName is the name of the AuthN Webhook configured with the shoot kube-apiserver
	AuthNWebhookImageName = "authn-webhook"
	// AudittailerImageName is the name of the Audittailer to deploy to the shoot.
	AudittailerImageName = "audittailer"
	// DroptailerImageName is the name of the Droptailer to deploy to the shoot.
	DroptailerImageName = "droptailer"
	// MetallbSpeakerImageName is the name of the metallb speaker to deploy to the shoot.
	MetallbSpeakerImageName = "metallb-speaker"
	// MetallbControllerImageName is the name of the metallb controller to deploy to the shoot.
	MetallbControllerImageName = "metallb-controller"
	// CSIControllerImageName is the name of the csi lvm controller to deploy to the seed's shoot namespace.
	CSIControllerImageName = "csi-lvm-controller"
	// CSIProvisionerImageName is the name of the csi lvm provisioner to deploy to the seed's shoot namespace.
	CSIProvisionerImageName = "csi-lvm-provisioner"
	// DurosControllerImageName is the name of the duros controller to deploy to the seed's shoot namespace.
	DurosControllerImageName = "duros-controller"
	// DurosResourceName is the name of the duros resource to deploy to the seed's shoot namespace.
	DurosResourceName = "shoot-default-storage"
	// FirewallResourceName is the name of the firewall resource deployed to the shoot's namespace.
	FirewallResourceName = "firewall"

	// APIKey is a constant for the key in a cloud provider secret.
	APIKey = "metalAPIKey"
	// APIHMac is a constant for the hmac in a cloud provider secret.
	APIHMac = "metalAPIHMac"

	// CloudProviderConfigName is the name of the configmap containing the cloud provider config.
	CloudProviderConfigName = "cloud-provider-config"
	// MachineControllerManagerName is a constant for the name of the machine-controller-manager.
	MachineControllerManagerName = "machine-controller-manager"

	// AuthNWebHookConfigName is the name of the configmap containing the authn webhook config.
	AuthNWebHookConfigName = "authn-webhook-config"
	// AuthNWebHookCertName is the name of the secret containing the authn webhook certificates.
	AuthNWebHookCertName = "authn-webhook-cert"
	// ShootExtensionTypeTokenIssuer appears unused? CHECKME
	ShootExtensionTypeTokenIssuer = "tokenissuer"
	// AuditPolicyName is the name of the configmap containing the audit policy.
	AuditPolicyName = "audit-policy-override"
	// AudittailerNamespace is the namespace where the audit tailer will get deployed.
	AudittailerNamespace = "audit"
	// AudittailerClientSecretName is the name of the secret containing the certificates for the audittailer client.
	AudittailerClientSecretName = "audittailer-client"
	// AudittailerServerSecretName is the name of the secret containing the certificates for the audittailer server.
	AudittailerServerSecretName = "audittailer-server"
	// AuditForwarderSplunkConfigName is the name of the configmap containing the splunk configuration for the auditforwarder.
	AuditForwarderSplunkConfigName = "audit-to-splunk-config"
	// AuditForwarderSplunkSecretName is the name of the secret containing the splunk hec token and, if required, the ca certificate.
	AuditForwarderSplunkSecretName = "audit-to-splunk-secret"
	// DroptailerNamespace is the namespace where the firewall droptailer will get deployed.
	DroptailerNamespace = "firewall"
	// DroptailerClientSecretName is the name of the secret containing the certificates for the droptailer client.
	DroptailerClientSecretName = "droptailer-client"
	// DroptailerServerSecretName is the name of the secret containing the certificates for the droptailer server.
	DroptailerServerSecretName = "droptailer-server"
	// CloudControllerManagerDeploymentName is the name of the deployment for the cloud controller manager.
	CloudControllerManagerDeploymentName = "cloud-controller-manager"
	// CloudControllerManagerServerName is the name of the secret containing the certificates for the cloud controller manager server.
	CloudControllerManagerServerName = "cloud-controller-manager-server"
	// GroupRolebindingControllerName is the name of the deployment for the group rolebinding controller.
	GroupRolebindingControllerName = "group-rolebinding-controller"
	// AccountingExporterName is the name of the deployment for the accounting exporter.
	AccountingExporterName = "accounting-exporter"
	// AuthNWebhookDeploymentName is the name of the deployment for the authn webhook.
	AuthNWebhookDeploymentName = "kube-jwt-authn-webhook"
	// AuthNWebhookServerName is the name of the secret containing the certificates for the authn webhook.
	AuthNWebhookServerName = "kube-jwt-authn-webhook-server"
	// DurosControllerDeploymentName is the name of the deployment for the duros-controller.
	DurosControllerDeploymentName = "duros-controller"
)

const Type = "metal"

Type is the type of resources managed by the Metal actuator.

Variables

var (
	// ChartsPath is the path to the charts
	ChartsPath = filepath.Join("charts")
	// InternalChartsPath is the path to the internal charts
	InternalChartsPath = filepath.Join(ChartsPath, "internal")
)

Types

type Credentials

type Credentials struct {
	MetalAPIKey  string
	MetalAPIHMac string
}

Credentials stores Metal credentials.

func ReadCredentialsSecret

func ReadCredentialsSecret(secret *corev1.Secret) (*Credentials, error)

ReadCredentialsSecret reads a secret containing credentials.