Documentation ¶
Overview ¶
The reconciler ensures that a base set of K8s resources is always available in the cluster. These are necessary to ensure correct out-of-the-box functionality. All resources containing the metropolis.monogon.dev/builtin=true label are assumed to be managed by the reconciler. It currently does not revert modifications made by admins, it is planned to create an admission plugin prohibiting such modifications to resources with the metropolis.monogon.dev/builtin label to deal with that problem. This would also solve a potential issue where you could delete resources just by adding the metropolis.monogon.dev/builtin=true label.
Index ¶
Constants ¶
View Source
const ( // BuiltinLabelKey is used as a k8s label to mark built-in objects (ie., // managed by the reconciler) BuiltinLabelKey = "metropolis.monogon.dev/builtin" // BuiltinLabelValue is used as a k8s label value, under the // BuiltinLabelKey key. BuiltinLabelValue = "true" // BuiltinRBACPrefix is used to prefix all built-in objects that are part // of the rbac/v1 API (eg. {Cluster,}Role{Binding,} objects). This // corresponds to the colon-separated 'namespaces' notation used by // Kubernetes system (system:) objects. BuiltinRBACPrefix = "metropolis:" )
Variables ¶
This section is empty.
Functions ¶
func Maintain ¶
func Maintain(clientSet kubernetes.Interface) supervisor.Runnable
func ReconcileAll ¶
func ReconcileAll(ctx context.Context, clientSet kubernetes.Interface) error
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.