gardener: github.com/gardener/gardener/pkg/operation/botanist Index | Files

package botanist

import "github.com/gardener/gardener/pkg/operation/botanist"

Index

Package Files

addons.go botanist.go cleanup.go constraints_check.go containerruntime.go controlplane.go dns.go etcdencryption.go extension.go garbage_collection.go health_check.go infrastructure.go logging.go metadata.go monitoring.go network.go operatingsystemconfig.go resource_manager.go secrets.go types.go waiter.go worker.go

Constants

const (
    // DefaultInterval is the default interval for retry operations.
    DefaultInterval = 5 * time.Second

    // Provider is the kubernetes provider label.
    Provider = "provider"
    // KubernetesProvider is the 'kubernetes' value of the Provider label.
    KubernetesProvider = "kubernetes"

    // KubeAggregatorAutoManaged is the label whether an APIService is automanaged by kube-aggregator.
    KubeAggregatorAutoManaged = autoregister.AutoRegisterManagedLabel

    // MetadataNameField ist the `metadata.name` field for a field selector.
    MetadataNameField = "metadata.name"
)
const (
    // DNSInternalName is a constant for a DNS resources used for the internal domain name.
    DNSInternalName = "internal"
    // DNSExternalName is a constant for a DNS resources used for the external domain name.
    DNSExternalName = "external"
    // DNSProviderRolePrimary is a constant for a DNS providers used to manage shoot domains.
    DNSProviderRolePrimary = "primary-dns-provider"
    // DNSProviderRoleAdditional is a constant for additionally managed DNS providers.
    DNSProviderRoleAdditional = "managed-dns-provider"
)
const (
    // ManagedResourceLabelKeyOrigin is a key for a label on a managed resource with the value 'origin'.
    ManagedResourceLabelKeyOrigin = "origin"
    // ManagedResourceLabelValueGardener is a value for a label on a managed resource with the value 'gardener'.
    ManagedResourceLabelValueGardener = "gardener"
)
const ControlPlaneDefaultTimeout = 3 * time.Minute

ControlPlaneDefaultTimeout is the default timeout and defines how long Gardener should wait for a successful reconciliation of a control plane resource.

const DNSIngressName = "ingress"

DNSIngressName is a constant for a DNS resources used for the ingress domain name.

const InfrastructureDefaultTimeout = 5 * time.Minute

InfrastructureDefaultTimeout is the default timeout and defines how long Gardener should wait for a successful reconciliation of an infrastructure resource.

const NetworkDefaultTimeout = 3 * time.Minute

NetworkDefaultTimeout is the default timeout and defines how long Gardener should wait for a successful reconciliation of a network resource.

const WorkerDefaultTimeout = 10 * time.Minute

WorkerDefaultTimeout is the default timeout and defines how long Gardener should wait for a successful reconciliation of a worker resource.

Variables

var (
    // FinalizeAfterFiveMinutes is an option to finalize resources after five minutes.
    FinalizeAfterFiveMinutes = utilclient.FinalizeGracePeriodSeconds(5 * 60)

    // FinalizeAfterOneHour is an option to finalize resources after one hour.
    FinalizeAfterOneHour = utilclient.FinalizeGracePeriodSeconds(60 * 60)

    // ZeroGracePeriod is an option to delete resources with no grace period.
    ZeroGracePeriod = utilclient.DeleteWith{client.GracePeriodSeconds(0)}
    // GracePeriodFiveMinutes is an option to delete resources with a grace period of five minutes.
    GracePeriodFiveMinutes = utilclient.DeleteWith{client.GracePeriodSeconds(5 * 60)}

    // NotSystemComponent is a requirement that something doesn't have the GardenRole GardenRoleSystemComponent.
    NotSystemComponent = MustNewRequirement(v1beta1constants.DeprecatedGardenRole, selection.NotEquals, v1beta1constants.GardenRoleSystemComponent)
    // NoCleanupPrevention is a requirement that the ShootNoCleanup label of something is not true.
    NoCleanupPrevention = MustNewRequirement(common.ShootNoCleanup, selection.NotEquals, "true")
    // NotKubernetesProvider is a requirement that the Provider label of something is not KubernetesProvider.
    NotKubernetesProvider = MustNewRequirement(Provider, selection.NotEquals, KubernetesProvider)
    // NotKubeAggregatorAutoManaged is a requirement that something is not auto-managed by Kube-Aggregator.
    NotKubeAggregatorAutoManaged = MustNewRequirement(KubeAggregatorAutoManaged, selection.DoesNotExist)

    // CleanupSelector is a selector that excludes system components and all resources not considered for auto cleanup.
    CleanupSelector = labels.NewSelector().Add(NotSystemComponent).Add(NoCleanupPrevention)

    // NoCleanupPreventionListOption are CollectionMatching that exclude system components or non-auto cleaned up resource.
    NoCleanupPreventionListOption = client.MatchingLabelsSelector{Selector: CleanupSelector}

    // MutatingWebhookConfigurationCleanOption is the delete selector for MutatingWebhookConfigurations.
    MutatingWebhookConfigurationCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // ValidatingWebhookConfigurationCleanOption is the delete selector for ValidatingWebhookConfigurations.
    ValidatingWebhookConfigurationCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // CustomResourceDefinitionCleanOption is the delete selector for CustomResources.
    CustomResourceDefinitionCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // DaemonSetCleanOption is the delete selector for DaemonSets.
    DaemonSetCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // DeploymentCleanOption is the delete selector for Deployments.
    DeploymentCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // StatefulSetCleanOption is the delete selector for StatefulSets.
    StatefulSetCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // ServiceCleanOption is the delete selector for Services.
    ServiceCleanOption = utilclient.ListWith{
        client.MatchingLabelsSelector{
            Selector: labels.NewSelector().Add(NotKubernetesProvider, NotSystemComponent, NoCleanupPrevention),
        },
    }

    // NamespaceMatchingLabelsSelector is the delete label selector for Namespaces.
    NamespaceMatchingLabelsSelector = utilclient.ListWith{&NoCleanupPreventionListOption}

    // NamespaceMatchingFieldsSelector is the delete field selector for Namespaces.
    NamespaceMatchingFieldsSelector = utilclient.ListWith{
        client.MatchingFieldsSelector{
            Selector: fields.AndSelectors(
                fields.OneTermNotEqualSelector(MetadataNameField, metav1.NamespacePublic),
                fields.OneTermNotEqualSelector(MetadataNameField, metav1.NamespaceSystem),
                fields.OneTermNotEqualSelector(MetadataNameField, metav1.NamespaceDefault),
                fields.OneTermNotEqualSelector(MetadataNameField, corev1.NamespaceNodeLease),
            ),
        },
    }

    // APIServiceCleanOption is the delete selector for APIServices.
    APIServiceCleanOption = utilclient.ListWith{
        client.MatchingLabelsSelector{
            Selector: labels.NewSelector().Add(NotSystemComponent, NotKubeAggregatorAutoManaged),
        },
    }

    // CronJobCleanOption is the delete selector for CronJobs.
    CronJobCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // IngressCleanOption is the delete selector for Ingresses.
    IngressCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // JobCleanOption is the delete selector for Jobs.
    JobCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // PodCleanOption is the delete selector for Pods.
    PodCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // ReplicaSetCleanOption is the delete selector for ReplicaSets.
    ReplicaSetCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // ReplicationControllerCleanOption is the delete selector for ReplicationControllers.
    ReplicationControllerCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // PersistentVolumeClaimCleanOption is the delete selector for PersistentVolumeClaims.
    PersistentVolumeClaimCleanOption = utilclient.ListWith{&NoCleanupPreventionListOption}

    // NamespaceErrorToleration are the errors to be tolerated during deletion.
    NamespaceErrorToleration = utilclient.TolerateErrors{apierrors.IsConflict}
)
var Now = time.Now

Now determines the current time.

func DetermineBackupSchedule Uses

func DetermineBackupSchedule(shoot *gardencorev1beta1.Shoot, etcd *druidv1alpha1.Etcd) (string, error)

DetermineBackupSchedule determines the backup schedule based on the shoot creation and maintenance time window.

func DetermineDefragmentSchedule Uses

func DetermineDefragmentSchedule(shoot *gardencorev1beta1.Shoot, etcd *druidv1alpha1.Etcd) (string, error)

DetermineDefragmentSchedule determines the defragment schedule based on the shoot creation and maintenance time window.

func GenerateDNSProviderName Uses

func GenerateDNSProviderName(secretName, providerType string) string

GenerateDNSProviderName creates a name for the dns provider out of the passed `secretName` and `providerType`.

func IsProblematicWebhook Uses

func IsProblematicWebhook(w webhook.WebhookAccessor) bool

IsProblematicWebhook checks if a single webhook of the Shoot Cluster is problematic and the Shoot should therefore not be hibernated. Problematic webhooks are webhooks with rules for CREATE/UPDATE/* pods or nodes and failurePolicy=Fail/nil. If the Shoot contains such a webhook, we can never wake up this shoot cluster again as new nodes cannot get created/ready, or our system component pods cannot get created/ready (because the webhook's backing pod is not yet running).

func IsValidAuditPolicyVersion Uses

func IsValidAuditPolicyVersion(shootVersion string, schemaVersion *schema.GroupVersionKind) (bool, error)

IsValidAuditPolicyVersion checks whether the api server support the provided audit policy apiVersion

func MustNewRequirement Uses

func MustNewRequirement(key string, op selection.Operator, vals ...string) labels.Requirement

MustNewRequirement creates a labels.Requirement with the given values and panics if there is an error.

type Botanist Uses

type Botanist struct {
    *operation.Operation
    DefaultDomainSecret *corev1.Secret
    // contains filtered or unexported fields
}

Botanist is a struct which has methods that perform cloud-independent operations for a Shoot cluster.

func New Uses

func New(o *operation.Operation) (*Botanist, error)

New takes an operation object <o> and creates a new Botanist object. It checks whether the given Shoot DNS domain is covered by a default domain, and if so, it sets the <DefaultDomainSecret> attribute on the Botanist object.

func (*Botanist) ApplyEncryptionConfiguration Uses

func (b *Botanist) ApplyEncryptionConfiguration(ctx context.Context) error

ApplyEncryptionConfiguration creates or updates a secret on the Seed which contains the encryption configuration that is necessary to encrypt the Kubernetes secrets in etcd.

To mitigate data loss to a certain degree, the secret is also synced to the Garden cluster.

func (*Botanist) CheckHibernationPossible Uses

func (b *Botanist) CheckHibernationPossible(ctx context.Context, constraint gardencorev1beta1.Condition) (*gardencorev1beta1.Condition, error)

CheckHibernationPossible checks the Shoot for problematic webhooks which could prevent wakeup after hibernation

func (*Botanist) CheckVPNConnection Uses

func (b *Botanist) CheckVPNConnection(ctx context.Context, logger *logrus.Entry) (bool, error)

CheckVPNConnection checks whether the VPN connection between the control plane and the shoot networks is established.

func (*Botanist) CleanExtendedAPIs Uses

func (b *Botanist) CleanExtendedAPIs(ctx context.Context) error

CleanExtendedAPIs removes API extensions like CRDs and API services from the Shoot cluster.

func (*Botanist) CleanKubernetesResources Uses

func (b *Botanist) CleanKubernetesResources(ctx context.Context) error

CleanKubernetesResources deletes all the Kubernetes resources in the Shoot cluster other than those stored in the exceptions map. It will check whether all the Kubernetes resources in the Shoot cluster other than those stored in the exceptions map have been deleted. It will return an error in case it has not finished yet, and nil if all resources are gone.

func (*Botanist) CleanShootNamespaces Uses

func (b *Botanist) CleanShootNamespaces(ctx context.Context) error

CleanShootNamespaces deletes all non-system namespaces in the Shoot cluster. It assumes that all workload resources are cleaned up in previous step(s).

func (*Botanist) CleanWebhooks Uses

func (b *Botanist) CleanWebhooks(ctx context.Context) error

CleanWebhooks deletes all Webhooks in the Shoot cluster that are not being managed by the addon manager.

func (*Botanist) CleanupOperatingSystemConfigs Uses

func (b *Botanist) CleanupOperatingSystemConfigs(ctx context.Context, usedOscNames map[string]string) error

CleanupOperatingSystemConfigs deletes all unused operating system configs in the shoot seed namespace (i.e., those which are not part of the provided map <usedOscNames>.

func (*Botanist) ComputeShootOperatingSystemConfig Uses

func (b *Botanist) ComputeShootOperatingSystemConfig(ctx context.Context) error

ComputeShootOperatingSystemConfig generates the shoot operating system configuration. Both, the downloader and original configuration will be generated and stored in the shoot specific cloud config map for later usage.

func (*Botanist) ConstraintsChecks Uses

func (b *Botanist) ConstraintsChecks(ctx context.Context, initializeShootClients func() error, hibernation gardencorev1beta1.Condition) gardencorev1beta1.Condition

ConstraintsChecks conducts the constraints checks on all the given constraints.

func (*Botanist) DeleteClusterAutoscaler Uses

func (b *Botanist) DeleteClusterAutoscaler(ctx context.Context) error

DeleteClusterAutoscaler deletes the cluster-autoscaler deployment in the Seed cluster which holds the Shoot's control plane.

func (*Botanist) DeleteContainerRuntimeResources Uses

func (b *Botanist) DeleteContainerRuntimeResources(ctx context.Context) error

DeleteContainerRuntimeResources deletes all container runtime resources from the Shoot namespace in the Seed.

func (*Botanist) DeleteDNSProviders Uses

func (b *Botanist) DeleteDNSProviders(ctx context.Context) error

DeleteDNSProviders deletes all DNS providers in the shoot namespace of the seed.

func (*Botanist) DeleteExtensionResources Uses

func (b *Botanist) DeleteExtensionResources(ctx context.Context) error

DeleteExtensionResources deletes all extension resources from the Shoot namespace in the Seed.

func (*Botanist) DeleteKubeAPIServer Uses

func (b *Botanist) DeleteKubeAPIServer(ctx context.Context) error

DeleteKubeAPIServer deletes the kube-apiserver deployment in the Seed cluster which holds the Shoot's control plane.

func (*Botanist) DeleteManagedResources Uses

func (b *Botanist) DeleteManagedResources(ctx context.Context) error

DeleteManagedResources deletes all managed resources from the Shoot namespace in the Seed.

func (*Botanist) DeleteNamespace Uses

func (b *Botanist) DeleteNamespace(ctx context.Context) error

DeleteNamespace deletes the namespace in the Seed cluster which holds the control plane components. The built-in garbage collection in Kubernetes will automatically delete all resources which belong to this namespace. This comprises volumes and load balancers as well.

func (*Botanist) DeleteSeedMonitoring Uses

func (b *Botanist) DeleteSeedMonitoring(ctx context.Context) error

DeleteSeedMonitoring will delete the monitoring stack from the Seed cluster to avoid phantom alerts during the deletion process. More precisely, the Alertmanager and Prometheus StatefulSets will be deleted.

func (*Botanist) DeleteStaleContainerRuntimeResources Uses

func (b *Botanist) DeleteStaleContainerRuntimeResources(ctx context.Context) error

DeleteStaleContainerRuntimeResources deletes unused container runtime resources from the shoot namespace in the seed.

func (*Botanist) DeleteStaleExtensionResources Uses

func (b *Botanist) DeleteStaleExtensionResources(ctx context.Context) error

DeleteStaleExtensionResources deletes unused extensions from the shoot namespace in the seed.

func (*Botanist) DeployAdditionalDNSProviders Uses

func (b *Botanist) DeployAdditionalDNSProviders(ctx context.Context) error

DeployAdditionalDNSProviders deploys the additional DNS providers configured in the shoot resource.

func (*Botanist) DeployBackupEntryInGarden Uses

func (b *Botanist) DeployBackupEntryInGarden(ctx context.Context) error

DeployBackupEntryInGarden deploys the BackupEntry resource in garden.

func (*Botanist) DeployCloudProviderSecret Uses

func (b *Botanist) DeployCloudProviderSecret(ctx context.Context) error

DeployCloudProviderSecret creates or updates the cloud provider secret in the Shoot namespace in the Seed cluster.

func (*Botanist) DeployClusterAutoscaler Uses

func (b *Botanist) DeployClusterAutoscaler(ctx context.Context) error

DeployClusterAutoscaler deploys the cluster-autoscaler into the Shoot namespace in the Seed cluster. It is responsible for automatically scaling the worker pools of the Shoot.

func (*Botanist) DeployContainerRuntimeResources Uses

func (b *Botanist) DeployContainerRuntimeResources(ctx context.Context) error

DeployContainerRuntimeResources creates the `Container runtime` resource in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the resources successfully.

func (*Botanist) DeployControlPlane Uses

func (b *Botanist) DeployControlPlane(ctx context.Context) error

DeployControlPlane creates the `ControlPlane` extension resource in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the cluster successfully.

func (*Botanist) DeployControlPlaneExposure Uses

func (b *Botanist) DeployControlPlaneExposure(ctx context.Context) error

DeployControlPlaneExposure creates the `ControlPlane` extension resource with purpose `exposure` in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the cluster successfully.

func (*Botanist) DeployETCD Uses

func (b *Botanist) DeployETCD(ctx context.Context) error

DeployETCD deploys two etcd clusters via StatefulSets. The first etcd cluster (called 'main') is used for all the data the Shoot Kubernetes cluster needs to store, whereas the second etcd luster (called 'events') is only used to store the events data. The objectstore is also set up to store the backups.

func (*Botanist) DeployExtensionResources Uses

func (b *Botanist) DeployExtensionResources(ctx context.Context) error

DeployExtensionResources creates the `Extension` extension resource in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the cluster successfully.

func (*Botanist) DeployExternalDomainDNSRecord Uses

func (b *Botanist) DeployExternalDomainDNSRecord(ctx context.Context) error

DeployExternalDomainDNSRecord deploys the DNS record for the external cluster domain.

func (*Botanist) DeployGardenerResourceManager Uses

func (b *Botanist) DeployGardenerResourceManager(ctx context.Context) error

DeployGardenerResourceManager deploys the gardener-resource-manager which will use CRD resources in order to ensure that they exist in a cluster/reconcile them in case somebody changed something.

func (*Botanist) DeployInfrastructure Uses

func (b *Botanist) DeployInfrastructure(ctx context.Context) error

DeployInfrastructure creates the `Infrastructure` extension resource in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the cluster successfully.

func (*Botanist) DeployInternalDomainDNSRecord Uses

func (b *Botanist) DeployInternalDomainDNSRecord(ctx context.Context) error

DeployInternalDomainDNSRecord deploys the DNS record for the internal cluster domain.

func (*Botanist) DeployKubeAPIServer Uses

func (b *Botanist) DeployKubeAPIServer(ctx context.Context) error

DeployKubeAPIServer deploys kube-apiserver deployment.

func (*Botanist) DeployKubeAPIServerService Uses

func (b *Botanist) DeployKubeAPIServerService(ctx context.Context) error

DeployKubeAPIServerService deploys kube-apiserver service.

func (*Botanist) DeployKubeControllerManager Uses

func (b *Botanist) DeployKubeControllerManager(ctx context.Context) error

DeployKubeControllerManager deploys kube-controller-manager deployment.

func (*Botanist) DeployKubeScheduler Uses

func (b *Botanist) DeployKubeScheduler(ctx context.Context) error

DeployKubeScheduler deploys kube-scheduler deployment.

func (*Botanist) DeployManagedResources Uses

func (b *Botanist) DeployManagedResources(ctx context.Context) error

DeployManagedResources deploys all the ManagedResource CRDs for the gardener-resource-manager.

func (*Botanist) DeployNamespace Uses

func (b *Botanist) DeployNamespace(ctx context.Context) error

DeployNamespace creates a namespace in the Seed cluster which is used to deploy all the control plane components for the Shoot cluster. Moreover, the cloud provider configuration and all the secrets will be stored as ConfigMaps/Secrets.

func (*Botanist) DeployNetwork Uses

func (b *Botanist) DeployNetwork(ctx context.Context) error

DeployNetwork creates the `Network` extension resource in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the cluster successfully.

func (*Botanist) DeployNetworkPolicies Uses

func (b *Botanist) DeployNetworkPolicies(ctx context.Context) error

DeployNetworkPolicies creates a network policies in a Shoot cluster's namespace that deny all traffic and allow certain components to use annotations to declare their desire to transmit/receive traffic to/from other Pods/IP addresses.

func (*Botanist) DeploySecrets Uses

func (b *Botanist) DeploySecrets(ctx context.Context) error

DeploySecrets creates a CA certificate for the Shoot cluster and uses it to sign the server certificate used by the kube-apiserver, and all client certificates used for communication. It also creates RSA key pairs for SSH connections to the nodes/VMs and for the VPN tunnel. Moreover, basic authentication credentials are computed which will be used to secure the Ingress resources and the kube-apiserver itself. Server certificates for the exposed monitoring endpoints (via Ingress) are generated as well.

func (*Botanist) DeploySeedLogging Uses

func (b *Botanist) DeploySeedLogging(ctx context.Context) error

DeploySeedLogging will install the Helm release "seed-bootstrap/charts/elastic-kibana-curator" in the Seed clusters.

func (*Botanist) DeploySeedMonitoring Uses

func (b *Botanist) DeploySeedMonitoring(ctx context.Context) error

DeploySeedMonitoring will install the Helm release "seed-monitoring" in the Seed clusters. It comprises components to monitor the Shoot cluster whose control plane runs in the Seed cluster.

func (*Botanist) DeployWorker Uses

func (b *Botanist) DeployWorker(ctx context.Context) error

DeployWorker creates the `Worker` extension resource in the shoot namespace in the seed cluster. Gardener waits until an external controller did reconcile the resource successfully.

func (*Botanist) DestroyControlPlane Uses

func (b *Botanist) DestroyControlPlane(ctx context.Context) error

DestroyControlPlane deletes the `ControlPlane` extension resource in the shoot namespace in the seed cluster, and it waits for a maximum of 10m until it is deleted.

func (*Botanist) DestroyControlPlaneExposure Uses

func (b *Botanist) DestroyControlPlaneExposure(ctx context.Context) error

DestroyControlPlaneExposure deletes the `ControlPlane` extension resource with purpose `exposure` in the shoot namespace in the seed cluster, and it waits for a maximum of 10m until it is deleted.

func (*Botanist) DestroyExternalDomainDNSRecord Uses

func (b *Botanist) DestroyExternalDomainDNSRecord(ctx context.Context) error

DestroyExternalDomainDNSRecord destroys the DNS record for the external cluster domain.

func (*Botanist) DestroyInfrastructure Uses

func (b *Botanist) DestroyInfrastructure(ctx context.Context) error

DestroyInfrastructure deletes the `Infrastructure` extension resource in the shoot namespace in the seed cluster, and it waits for a maximum of 10m until it is deleted.

func (*Botanist) DestroyIngressDNSRecord Uses

func (b *Botanist) DestroyIngressDNSRecord(ctx context.Context) error

DestroyIngressDNSRecord destroys the nginx-ingress resources created by Terraform.

func (*Botanist) DestroyInternalDomainDNSRecord Uses

func (b *Botanist) DestroyInternalDomainDNSRecord(ctx context.Context) error

DestroyInternalDomainDNSRecord destroys the DNS record for the internal cluster domain.

func (*Botanist) DestroyNetwork Uses

func (b *Botanist) DestroyNetwork(ctx context.Context) error

DestroyNetwork deletes the `Network` extension resource in the shoot namespace in the seed cluster, and it waits for a maximum of 10m until it is deleted.

func (*Botanist) DestroyWorker Uses

func (b *Botanist) DestroyWorker(ctx context.Context) error

DestroyWorker deletes the `Worker` extension resource in the shoot namespace in the seed cluster, and it waits for a maximum of 5m until it is deleted.

func (*Botanist) EnsureIngressDNSRecord Uses

func (b *Botanist) EnsureIngressDNSRecord(ctx context.Context) error

EnsureIngressDNSRecord creates the respective wildcard DNS record for the nginx-ingress-controller.

func (*Botanist) GenerateKubernetesDashboardConfig Uses

func (b *Botanist) GenerateKubernetesDashboardConfig() (map[string]interface{}, error)

GenerateKubernetesDashboardConfig generates the values which are required to render the chart of the kubernetes-dashboard properly.

func (*Botanist) GenerateNginxIngressConfig Uses

func (b *Botanist) GenerateNginxIngressConfig() (map[string]interface{}, error)

GenerateNginxIngressConfig generates the values which are required to render the chart of the nginx-ingress properly.

func (*Botanist) HealthChecks Uses

func (b *Botanist) HealthChecks(initializeShootClients func() error, thresholdMappings map[gardencorev1beta1.ConditionType]time.Duration, apiserverAvailability, controlPlane, nodes, systemComponents gardencorev1beta1.Condition) (gardencorev1beta1.Condition, gardencorev1beta1.Condition, gardencorev1beta1.Condition, gardencorev1beta1.Condition)

HealthChecks conducts the health checks on all the given conditions.

func (*Botanist) HibernateControlPlane Uses

func (b *Botanist) HibernateControlPlane(ctx context.Context) error

HibernateControlPlane hibernates the entire control plane if the shoot shall be hibernated.

func (*Botanist) MaintainShootAnnotations Uses

func (b *Botanist) MaintainShootAnnotations(ctx context.Context) error

MaintainShootAnnotations ensures that given deprecated Shoot annotations are maintained also with their new equivalent in the Shoot metadata.

func (*Botanist) MonitoringHealthChecks Uses

func (b *Botanist) MonitoringHealthChecks(checker *HealthChecker, inactiveAlerts gardencorev1beta1.Condition) gardencorev1beta1.Condition

MonitoringHealthChecks performs the monitoring related health checks.

func (*Botanist) PerformGarbageCollectionSeed Uses

func (b *Botanist) PerformGarbageCollectionSeed() error

PerformGarbageCollectionSeed performs garbage collection in the Shoot namespace in the Seed cluster

func (*Botanist) PerformGarbageCollectionShoot Uses

func (b *Botanist) PerformGarbageCollectionShoot() error

PerformGarbageCollectionShoot performs garbage collection in the kube-system namespace in the Shoot cluster, i.e., it deletes evicted pods (mitigation for https://github.com/kubernetes/kubernetes/issues/55051).

func (*Botanist) RequiredExtensionsExist Uses

func (b *Botanist) RequiredExtensionsExist(ctx context.Context) error

RequiredExtensionsExist checks whether all required extensions needed for an shoot operation exist.

func (*Botanist) RestartControlPlanePods Uses

func (b *Botanist) RestartControlPlanePods(ctx context.Context) error

RestartControlPlanePods restarts (deletes) pods of the shoot control plane.

func (*Botanist) RewriteShootSecretsIfEncryptionConfigurationChanged Uses

func (b *Botanist) RewriteShootSecretsIfEncryptionConfigurationChanged(ctx context.Context) error

RewriteShootSecretsIfEncryptionConfigurationChanged rewrites the secrets in the Shoot if the etcd encryption configuration changed. Rewriting here means that a patch request is sent that forces the etcd to encrypt them with the new configuration.

func (*Botanist) SyncShootCredentialsToGarden Uses

func (b *Botanist) SyncShootCredentialsToGarden(ctx context.Context) error

SyncShootCredentialsToGarden copies the kubeconfig generated for the user, the SSH keypair to the project namespace in the Garden cluster and the monitoring credentials for the user-facing monitoring stack are also copied.

func (*Botanist) WaitForControllersToBeActive Uses

func (b *Botanist) WaitForControllersToBeActive(ctx context.Context) error

WaitForControllersToBeActive checks whether kube-controller-manager has recently written to the Endpoint object holding the leader information. If yes, it is active.

func (*Botanist) WaitUntilBackupEntryInGardenReconciled Uses

func (b *Botanist) WaitUntilBackupEntryInGardenReconciled(ctx context.Context) error

WaitUntilBackupEntryInGardenReconciled waits until the backup entry within the garden cluster has been reconciled.

func (*Botanist) WaitUntilClusterAutoscalerDeleted Uses

func (b *Botanist) WaitUntilClusterAutoscalerDeleted(ctx context.Context) error

WaitUntilClusterAutoscalerDeleted waits until the cluster-autoscaler deployment within the Seed cluster has been deleted.

func (*Botanist) WaitUntilContainerRuntimeResourcesDeleted Uses

func (b *Botanist) WaitUntilContainerRuntimeResourcesDeleted(ctx context.Context) error

WaitUntilContainerRuntimeResourcesDeleted waits until all container runtime resources are gone or the context is cancelled.

func (*Botanist) WaitUntilContainerRuntimeResourcesReady Uses

func (b *Botanist) WaitUntilContainerRuntimeResourcesReady(ctx context.Context) error

WaitUntilContainerRuntimeResourcesReady waits until all container runtime resources report `Succeeded` in their last operation state. The state must be reported before the passed context is cancelled or a container runtime's timeout has been reached. As soon as one timeout has been overstepped the function returns an error, further waits on container runtime will be aborted.

func (*Botanist) WaitUntilControlPlaneDeleted Uses

func (b *Botanist) WaitUntilControlPlaneDeleted(ctx context.Context) error

WaitUntilControlPlaneDeleted waits until the control plane resource has been deleted.

func (*Botanist) WaitUntilControlPlaneExposureDeleted Uses

func (b *Botanist) WaitUntilControlPlaneExposureDeleted(ctx context.Context) error

WaitUntilControlPlaneExposureDeleted waits until the control plane resource with purpose `exposure` has been deleted.

func (*Botanist) WaitUntilControlPlaneExposureReady Uses

func (b *Botanist) WaitUntilControlPlaneExposureReady(ctx context.Context) error

WaitUntilControlPlaneExposureReady waits until the control plane resource with purpose `exposure` has been reconciled successfully.

func (*Botanist) WaitUntilControlPlaneReady Uses

func (b *Botanist) WaitUntilControlPlaneReady(ctx context.Context) error

WaitUntilControlPlaneReady waits until the control plane resource has been reconciled successfully.

func (*Botanist) WaitUntilEndpointsDoNotContainPodIPs Uses

func (b *Botanist) WaitUntilEndpointsDoNotContainPodIPs(ctx context.Context) error

WaitUntilEndpointsDoNotContainPodIPs waits until all endpoints in the shoot cluster to not contain any IPs from the Shoot's PodCIDR.

func (*Botanist) WaitUntilEtcdMainReady Uses

func (b *Botanist) WaitUntilEtcdMainReady(ctx context.Context) error

WaitUntilEtcdMainReady waits until the etcd-main statefulsets indicate readiness in its status.

func (*Botanist) WaitUntilEtcdReady Uses

func (b *Botanist) WaitUntilEtcdReady(ctx context.Context) error

WaitUntilEtcdReady waits until the etcd statefulsets indicate readiness in their statuses.

func (*Botanist) WaitUntilExtensionResourcesDeleted Uses

func (b *Botanist) WaitUntilExtensionResourcesDeleted(ctx context.Context) error

WaitUntilExtensionResourcesDeleted waits until all extension resources are gone or the context is cancelled.

func (*Botanist) WaitUntilExtensionResourcesReady Uses

func (b *Botanist) WaitUntilExtensionResourcesReady(ctx context.Context) error

WaitUntilExtensionResourcesReady waits until all extension resources report `Succeeded` in their last operation state. The state must be reported before the passed context is cancelled or an extension's timeout has been reached. As soon as one timeout has been overstepped the function returns an error, further waits on extensions will be aborted.

func (*Botanist) WaitUntilInfrastructureDeleted Uses

func (b *Botanist) WaitUntilInfrastructureDeleted(ctx context.Context) error

WaitUntilInfrastructureDeleted waits until the infrastructure resource has been deleted.

func (*Botanist) WaitUntilInfrastructureReady Uses

func (b *Botanist) WaitUntilInfrastructureReady(ctx context.Context) error

WaitUntilInfrastructureReady waits until the infrastructure resource has been reconciled successfully.

func (*Botanist) WaitUntilKubeAPIServerReady Uses

func (b *Botanist) WaitUntilKubeAPIServerReady(ctx context.Context) error

WaitUntilKubeAPIServerReady waits until the kube-apiserver pod(s) indicate readiness in their statuses.

func (*Botanist) WaitUntilKubeAPIServerServiceIsReady Uses

func (b *Botanist) WaitUntilKubeAPIServerServiceIsReady(ctx context.Context) error

WaitUntilKubeAPIServerServiceIsReady waits until the external load balancer of the kube-apiserver has been created (i.e., its ingress information has been updated in the service status).

func (*Botanist) WaitUntilManagedResourcesDeleted Uses

func (b *Botanist) WaitUntilManagedResourcesDeleted(ctx context.Context) error

WaitUntilManagedResourcesDeleted waits until all managed resources are gone or the context is cancelled.

func (*Botanist) WaitUntilNetworkIsDeleted Uses

func (b *Botanist) WaitUntilNetworkIsDeleted(ctx context.Context) error

WaitUntilNetworkIsDeleted waits until the Network resource has been deleted.

func (*Botanist) WaitUntilNetworkIsReady Uses

func (b *Botanist) WaitUntilNetworkIsReady(ctx context.Context) error

WaitUntilNetworkIsReady waits until the network resource has been reconciled successfully.

func (*Botanist) WaitUntilNoPodRunning Uses

func (b *Botanist) WaitUntilNoPodRunning(ctx context.Context) error

WaitUntilNoPodRunning waits until there is no running Pod in the shoot cluster.

func (*Botanist) WaitUntilNodesDeleted Uses

func (b *Botanist) WaitUntilNodesDeleted(ctx context.Context) error

WaitUntilNodesDeleted waits until no nodes exist in the shoot cluster anymore.

func (*Botanist) WaitUntilSeedNamespaceDeleted Uses

func (b *Botanist) WaitUntilSeedNamespaceDeleted(ctx context.Context) error

WaitUntilSeedNamespaceDeleted waits until the namespace of the Shoot cluster within the Seed cluster is deleted.

func (*Botanist) WaitUntilVPNConnectionExists Uses

func (b *Botanist) WaitUntilVPNConnectionExists(ctx context.Context) error

WaitUntilVPNConnectionExists waits until a port forward connection to the vpn-shoot pod in the kube-system namespace of the Shoot cluster can be established.

func (*Botanist) WaitUntilWorkerDeleted Uses

func (b *Botanist) WaitUntilWorkerDeleted(ctx context.Context) error

WaitUntilWorkerDeleted waits until the worker extension resource has been deleted.

func (*Botanist) WaitUntilWorkerReady Uses

func (b *Botanist) WaitUntilWorkerReady(ctx context.Context) error

WaitUntilWorkerReady waits until the worker extension resource has been successfully reconciled.

func (*Botanist) WakeUpControlPlane Uses

func (b *Botanist) WakeUpControlPlane(ctx context.Context) error

WakeUpControlPlane scales the replicas to 1 for the following deployments which are needed in case of shoot deletion: * etcd-events * etcd-main * kube-apiserver * kube-controller-manager

type HealthChecker Uses

type HealthChecker struct {
    // contains filtered or unexported fields
}

HealthChecker contains the condition thresholds.

func NewHealthChecker Uses

func NewHealthChecker(conditionThresholds map[gardencorev1beta1.ConditionType]time.Duration) *HealthChecker

NewHealthChecker creates a new health checker.

func (*HealthChecker) CheckClusterNodes Uses

func (b *HealthChecker) CheckClusterNodes(
    workers []gardencorev1beta1.Worker,
    condition gardencorev1beta1.Condition,
    nodeLister kutil.NodeLister,
) (*gardencorev1beta1.Condition, error)

CheckClusterNodes checks whether cluster nodes in the given listers are healthy and within the desired range. Additional checks are executed in the provider extension

func (*HealthChecker) CheckControlPlane Uses

func (b *HealthChecker) CheckControlPlane(
    gardenerVersion string,
    shoot *gardencorev1beta1.Shoot,
    namespace string,
    condition gardencorev1beta1.Condition,
    deploymentLister kutil.DeploymentLister,
    statefulSetLister kutil.StatefulSetLister,
    etcdLister kutil.EtcdLister,
    workerLister kutil.WorkerLister,
) (*gardencorev1beta1.Condition, error)

CheckControlPlane checks whether the control plane components in the given listers are complete and healthy.

func (*HealthChecker) CheckExtensionCondition Uses

func (b *HealthChecker) CheckExtensionCondition(condition gardencorev1beta1.Condition, extensionsCondition []extensionCondition) *gardencorev1beta1.Condition

CheckExtensionCondition checks whether the conditions provided by extensions are healthy.

func (*HealthChecker) CheckLoggingControlPlane Uses

func (b *HealthChecker) CheckLoggingControlPlane(
    namespace string,
    isTestingShoot bool,
    condition gardencorev1beta1.Condition,
    deploymentLister kutil.DeploymentLister,
    statefulSetLister kutil.StatefulSetLister,
) (*gardencorev1beta1.Condition, error)

CheckLoggingControlPlane checks whether the logging components in the given listers are complete and healthy.

func (*HealthChecker) CheckMonitoringControlPlane Uses

func (b *HealthChecker) CheckMonitoringControlPlane(
    namespace string,
    isTestingShoot bool,
    wantsAlertmanager bool,
    condition gardencorev1beta1.Condition,
    deploymentLister kutil.DeploymentLister,
    statefulSetLister kutil.StatefulSetLister,
) (*gardencorev1beta1.Condition, error)

CheckMonitoringControlPlane checks whether the monitoring in the given listers are complete and healthy.

func (*HealthChecker) CheckMonitoringSystemComponents Uses

func (b *HealthChecker) CheckMonitoringSystemComponents(
    namespace string,
    isTestingShoot bool,
    condition gardencorev1beta1.Condition,
    deploymentLister kutil.DeploymentLister,
    daemonSetLister kutil.DaemonSetLister,
) (*gardencorev1beta1.Condition, error)

CheckMonitoringSystemComponents checks whether the monitoring components in the given listers are complete and healthy.

func (*HealthChecker) CheckOptionalAddonsSystemComponents Uses

func (b *HealthChecker) CheckOptionalAddonsSystemComponents(
    namespace string,
    condition gardencorev1beta1.Condition,
    deploymentLister kutil.DeploymentLister,
    daemonSetLister kutil.DaemonSetLister,
) (*gardencorev1beta1.Condition, error)

CheckOptionalAddonsSystemComponents checks whether the addons in the given listers are healthy.

func (*HealthChecker) CheckSystemComponents Uses

func (b *HealthChecker) CheckSystemComponents(
    namespace string,
    condition gardencorev1beta1.Condition,
    deploymentLister kutil.DeploymentLister,
    daemonSetLister kutil.DaemonSetLister,
) (*gardencorev1beta1.Condition, error)

CheckSystemComponents checks whether the system components in the given listers are complete and healthy.

func (*HealthChecker) FailedCondition Uses

func (b *HealthChecker) FailedCondition(condition gardencorev1beta1.Condition, reason, message string) gardencorev1beta1.Condition

FailedCondition returns a progressing or false condition depending on the progressing threshold.

Package botanist imports 83 packages (graph) and is imported by 4 packages. Updated 2020-03-30. Refresh now. Tools for package owners.