bootstrap

Documentation

Index

• Constants
• Variables
• func AWSArnAssumeRolePolicy(identityID string) *iamv1.PolicyDocument
• func AWSServiceAssumeRolePolicy(identityID string) *iamv1.PolicyDocument
• func AssumeRolePolicy(identityType iamv1.PrincipalType, principalIDs []string) *iamv1.PolicyDocument
• type PolicyName
  • func (p PolicyName) IsValid() bool
• type Template
  • func NewTemplate() Template
  • func (t Template) ControllersPolicy() *iamv1.PolicyDocument
  • func (t Template) GenerateManagedIAMPolicyDocuments(policyDocDir string) error
  • func (t Template) GetPolicyDocFromPolicyName(policyName PolicyName) *iamv1.PolicyDocument
  • func (t Template) NewManagedName(name string) string
  • func (t Template) RenderCloudFormation() *cloudformation.Template

Constants

const (
	AWSIAMGroupBootstrapper                      = "AWSIAMGroupBootstrapper"
	AWSIAMInstanceProfileControllers             = "AWSIAMInstanceProfileControllers"
	AWSIAMInstanceProfileControlPlane            = "AWSIAMInstanceProfileControlPlane"
	AWSIAMInstanceProfileNodes                   = "AWSIAMInstanceProfileNodes"
	AWSIAMRoleControllers                        = "AWSIAMRoleControllers"
	AWSIAMRoleControlPlane                       = "AWSIAMRoleControlPlane"
	AWSIAMRoleNodes                              = "AWSIAMRoleNodes"
	AWSIAMRoleEKSControlPlane                    = "AWSIAMRoleEKSControlPlane"
	AWSIAMRoleEKSNodegroup                       = "AWSIAMRoleEKSNodegroup"
	AWSIAMRoleEKSFargate                         = "AWSIAMRoleEKSFargate"
	AWSIAMUserBootstrapper                       = "AWSIAMUserBootstrapper"
	ControllersPolicy                 PolicyName = "AWSIAMManagedPolicyControllers"
	ControlPlanePolicy                PolicyName = "AWSIAMManagedPolicyCloudProviderControlPlane"
	NodePolicy                        PolicyName = "AWSIAMManagedPolicyCloudProviderNodes"
	CSIPolicy                         PolicyName = "AWSEBSCSIPolicyController"
)

Variables

var ManagedIAMPolicyNames = [4]PolicyName{ControllersPolicy, ControlPlanePolicy, NodePolicy, CSIPolicy}

ManagedIAMPolicyNames slice of managed IAM policies

Functions

func AWSArnAssumeRolePolicy

func AWSArnAssumeRolePolicy(identityID string) *iamv1.PolicyDocument

func AWSServiceAssumeRolePolicy

func AWSServiceAssumeRolePolicy(identityID string) *iamv1.PolicyDocument

func AssumeRolePolicy

func AssumeRolePolicy(identityType iamv1.PrincipalType, principalIDs []string) *iamv1.PolicyDocument

Types

type PolicyName

type PolicyName string

func (PolicyName) IsValid

func (p PolicyName) IsValid() bool

type Template

type Template struct {
	Spec *bootstrapv1.AWSIAMConfigurationSpec
}

func NewTemplate

func NewTemplate() Template

func (Template) ControllersPolicy

func (t Template) ControllersPolicy() *iamv1.PolicyDocument

func (Template) GenerateManagedIAMPolicyDocuments

func (t Template) GenerateManagedIAMPolicyDocuments(policyDocDir string) error

GenerateManagedIAMPolicyDocuments generates JSON representation of policy documents for all ManagedIAMPolicy

func (Template) GetPolicyDocFromPolicyName

func (t Template) GetPolicyDocFromPolicyName(policyName PolicyName) *iamv1.PolicyDocument

func (Template) NewManagedName

func (t Template) NewManagedName(name string) string

NewManagedName creates an IAM acceptable name prefixed with this Cluster API implementation's prefix.

func (Template) RenderCloudFormation

func (t Template) RenderCloudFormation() *cloudformation.Template

Template is an AWS CloudFormation template to bootstrap IAM policies, users and roles for use by Cluster API Provider AWS