controller

Documentation

Index

• func NewEvictor(client client.Client, scheme *runtime.Scheme, ...) *evictor
• func NewServiceAccountReconciler(ctx context.Context, client client.Client, scheme *runtime.Scheme, ...) (*serviceAccountReconciler, error)

Functions

func NewEvictor

func NewEvictor(
	client client.Client, scheme *runtime.Scheme, eventRecorder record.EventRecorder,
) *evictor

NewEvictor creates a new ServiceAccount reconciler that evicts pods that are failing to pull container images because they do not have an image pull secret provisioned for their ServiceAccount.

func NewServiceAccountReconciler

func NewServiceAccountReconciler(
	ctx context.Context, client client.Client, scheme *runtime.Scheme, eventRecorder record.EventRecorder,
) (*serviceAccountReconciler, error)

NewServiceAccountReconciler creates a new ServiceAccount reconciler that creates and refreshes image pull secrets based on ID federation config annotated to a ServiceAccount. Image pull secrets are attached to a ServiceAccount (i.e. registered with .imagePullSecrets field) so that pods using the ServiceAccount can pull container images using the secret without specifying .spec.imagePullSecrets field.