package apiconfig

import "k8s.io/kubernetes/cmd/kubeadm/app/phases/apiconfig"

Index ¶

• Constants
• func CreateClusterRoleBindings(clientset *clientset.Clientset) error
• func CreateClusterRoles(clientset *clientset.Clientset) error
• func CreateRBACRules(clientset *clientset.Clientset) error
• func CreateServiceAccounts(clientset *clientset.Clientset) error
• func UpdateMasterRoleLabelsAndTaints(client *clientset.Clientset) error

Constants ¶

const (

	// KubeDNSClusterRoleName sets the name for the kube-dns ClusterRole
	KubeDNSClusterRoleName = "kubeadm:kube-dns"
	// KubeProxyClusterRoleName sets the name for the kube-proxy ClusterRole
	KubeProxyClusterRoleName = "system:node-proxier"
	// NodeBootstrapperClusterRoleName sets the name for the TLS Node Bootstrapper ClusterRole
	NodeBootstrapperClusterRoleName = "system:node-bootstrapper"
)

Functions ¶

func CreateClusterRoleBindings ¶

func CreateClusterRoleBindings(clientset *clientset.Clientset) error

CreateClusterRoleBindings creates all necessary bindings between bootstrapped & kubeadm-created ClusterRoles and subjects kubeadm is using

func CreateClusterRoles ¶

func CreateClusterRoles(clientset *clientset.Clientset) error

CreateClusterRoles creates the ClusterRoles that aren't bootstrapped by the apiserver

func CreateRBACRules ¶

func CreateRBACRules(clientset *clientset.Clientset) error

CreateRBACRules creates the essential RBAC rules for a minimally set-up cluster

func CreateServiceAccounts ¶

func CreateServiceAccounts(clientset *clientset.Clientset) error

CreateServiceAccounts creates the necessary serviceaccounts that kubeadm uses/might use.

func UpdateMasterRoleLabelsAndTaints ¶

func UpdateMasterRoleLabelsAndTaints(client *clientset.Clientset) error

UpdateMasterRoleLabelsAndTaints taints the master and sets the master label

Source Files ¶

clusterroles.go setupmaster.go