policy

Documentation

Index

• func EndpointGroupIndexSecurityPolicyFunc(o runtime.Object) []string
• func EndpointIndexSecurityPolicyFunc(o runtime.Object) []string
• func FlattenPorts(ports []securityv1alpha1.SecurityPolicyPort) ([]policycache.RulePort, error)
• func GenerateGroupName(spec *groupv1alpha1.EndpointGroupSpec) string
• type PolicyReconciler
  • func (r *PolicyReconciler) GroupGenerateReconcile(req ctrl.Request) (ctrl.Result, error)
  • func (r *PolicyReconciler) ReconcileEndpoint(req ctrl.Request) (ctrl.Result, error)
  • func (r *PolicyReconciler) ReconcileGlobalPolicy(_ ctrl.Request) (ctrl.Result, error)
  • func (r *PolicyReconciler) ReconcilePatch(req ctrl.Request) (ctrl.Result, error)
  • func (r *PolicyReconciler) ReconcilePolicy(req ctrl.Request) (ctrl.Result, error)
  • func (r *PolicyReconciler) SetupWithManager(mgr ctrl.Manager) error

Functions

func EndpointGroupIndexSecurityPolicyFunc

func EndpointGroupIndexSecurityPolicyFunc(o runtime.Object) []string

EndpointGroupIndexSecurityPolicyFunc return the SecurityPolicy reference EndpointGroup names

func EndpointIndexSecurityPolicyFunc

func EndpointIndexSecurityPolicyFunc(o runtime.Object) []string

func FlattenPorts

func FlattenPorts(ports []securityv1alpha1.SecurityPolicyPort) ([]policycache.RulePort, error)

func GenerateGroupName

func GenerateGroupName(spec *groupv1alpha1.EndpointGroupSpec) string

GenerateGroupName use spec hash as EndpointGroup name

Types

type PolicyReconciler

type PolicyReconciler struct {
	client.Client
	ReadClient client.Reader
	Scheme     *runtime.Scheme
	// contains filtered or unexported fields
}

func (*PolicyReconciler) GroupGenerateReconcile

func (r *PolicyReconciler) GroupGenerateReconcile(req ctrl.Request) (ctrl.Result, error)

GroupGenerateReconcile generate EndpointGroups by SecurityPolicy selector.

func (*PolicyReconciler) ReconcileEndpoint

func (r *PolicyReconciler) ReconcileEndpoint(req ctrl.Request) (ctrl.Result, error)

func (*PolicyReconciler) ReconcileGlobalPolicy

func (r *PolicyReconciler) ReconcileGlobalPolicy(_ ctrl.Request) (ctrl.Result, error)

ReconcileGlobalPolicy handle GlobalPolicy. At most one GlobalPolicy at the same time, so we full sync PolicyRules every reconcile.

func (*PolicyReconciler) ReconcilePatch

func (r *PolicyReconciler) ReconcilePatch(req ctrl.Request) (ctrl.Result, error)

func (*PolicyReconciler) ReconcilePolicy

func (r *PolicyReconciler) ReconcilePolicy(req ctrl.Request) (ctrl.Result, error)

func (*PolicyReconciler) SetupWithManager

func (r *PolicyReconciler) SetupWithManager(mgr ctrl.Manager) error