core

package

v1.5.0 Latest Latest Go to latest Published: May 1, 2024 License: Apache-2.0 Imports: 16 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/aws/amazon-vpc-resource-controller-k8s

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
type AnnotationValidator
- func NewAnnotationValidator(condition condition.Conditions, log logr.Logger, d *admission.Decoder, ...) *AnnotationValidator
- func (a *AnnotationValidator) Handle(_ context.Context, req admission.Request) admission.Response
type NodeUpdateWebhook
- func NewNodeUpdateWebhook(condition condition.Conditions, log logr.Logger, d *admission.Decoder, ...) *NodeUpdateWebhook
- func (a *NodeUpdateWebhook) Handle(_ context.Context, req admission.Request) admission.Response
type PodMutationWebHook
- func NewPodMutationWebHook(sgpAPI utils.SecurityGroupForPodsAPI, log logr.Logger, ...) *PodMutationWebHook
type PodType
- func WhichPod(pod *corev1.Pod) PodType

Constants ¶

View Source

const (
	DefaultResourceLimit         = "1"
	FargatePodSGAnnotationKey    = "fargate.amazonaws.com/pod-sg"
	FargatePodIdentifierLabelKey = "eks.amazonaws.com/fargate-profile"
)

Variables ¶

View Source

var (
	Fargate        = PodType("Fargate")
	Windows        = PodType("Windows")
	Linux          = PodType("Linux")
	HostNetworking = PodType("HostNetworking")
)

Functions ¶

This section is empty.

Types ¶

type AnnotationValidator ¶

type AnnotationValidator struct {
	Condition condition.Conditions
	Log       logr.Logger
	Checker   healthz.Checker
	// contains filtered or unexported fields
}

AnnotationValidator validates the resource allocated to the Pod via annotations. The WebHook prevents unauthorized user from modifying/removing these Annotations.

func NewAnnotationValidator ¶ added in v1.1.6

func NewAnnotationValidator(condition condition.Conditions, log logr.Logger, d *admission.Decoder, healthzHandler *rcHealthz.HealthzHandler) *AnnotationValidator

func (*AnnotationValidator) Handle ¶

func (a *AnnotationValidator) Handle(_ context.Context, req admission.Request) admission.Response

type NodeUpdateWebhook ¶ added in v1.1.3

type NodeUpdateWebhook struct {
	Condition condition.Conditions
	Log       logr.Logger
	Checker   healthz.Checker
	// contains filtered or unexported fields
}

func NewNodeUpdateWebhook ¶ added in v1.1.6

func NewNodeUpdateWebhook(condition condition.Conditions, log logr.Logger, d *admission.Decoder, healthzHandler *rcHealthz.HealthzHandler) *NodeUpdateWebhook

func (*NodeUpdateWebhook) Handle ¶ added in v1.1.3

func (a *NodeUpdateWebhook) Handle(_ context.Context, req admission.Request) admission.Response

Handle allows update request on Node on the expected fields when the request is coming from the aws-node Service Account. It also ensures the updates are allowed only when the Security Group for Pod feature is enabled.

type PodMutationWebHook ¶ added in v1.1.0

type PodMutationWebHook struct {
	SGPAPI    utils.SecurityGroupForPodsAPI
	Log       logr.Logger
	Condition condition.Conditions
	// contains filtered or unexported fields
}

PodResourceInjector injects resources into Pods

func NewPodMutationWebHook ¶ added in v1.1.6

func NewPodMutationWebHook(
	sgpAPI utils.SecurityGroupForPodsAPI,
	log logr.Logger,
	condition condition.Conditions,
	d *admission.Decoder,
	healthzHandler *rcHealthz.HealthzHandler,
) *PodMutationWebHook

func (*PodMutationWebHook) GetPatchResponse ¶ added in v1.1.0

func (i *PodMutationWebHook) GetPatchResponse(req admission.Request, pod *corev1.Pod, log logr.Logger) admission.Response

Returns the Response by patching the updated object with raw object from request

func (*PodMutationWebHook) Handle ¶ added in v1.1.0

func (i *PodMutationWebHook) Handle(_ context.Context, req admission.Request) admission.Response

func (*PodMutationWebHook) HandleFargatePod ¶ added in v1.1.0

func (i *PodMutationWebHook) HandleFargatePod(req admission.Request, pod *corev1.Pod,
	log logr.Logger) (response admission.Response)

HandleFargatePod mutates the Fargate Pod if the Pod Matches a SGP. This also acts like a validation WebHook by removing any existing Annotation on the Pod on Create Event.

func (*PodMutationWebHook) HandleLinuxPod ¶ added in v1.1.0

func (i *PodMutationWebHook) HandleLinuxPod(req admission.Request, pod *corev1.Pod,
	log logr.Logger) (response admission.Response)

HandleLinuxPod mutates the Linux Pod by injecting pod-eni limit if the Linux Pod matches any SGP

func (*PodMutationWebHook) HandleWindowsPod ¶ added in v1.1.0

func (i *PodMutationWebHook) HandleWindowsPod(req admission.Request, pod *corev1.Pod,
	log logr.Logger) (response admission.Response)

HandleWindowsPod mutates the Windows Pod by injecting a secondary IPv4 Address Limit to the Pod when the Windows IPAM feature is enabled via ConfigMap

func (*PodMutationWebHook) InitializeEmptyFields ¶ added in v1.1.0

func (i *PodMutationWebHook) InitializeEmptyFields(req admission.Request, pod *corev1.Pod)

InitializeEmptyFields inits the empty fields in the request

type PodType ¶ added in v1.1.0

type PodType string

func WhichPod ¶ added in v1.1.0

func WhichPod(pod *corev1.Pod) PodType

WhichPod returns the PodType, each PodType will be handled differently

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL