package apiconfig

import "k8s.io/kubernetes/cmd/kubeadm/app/phases/apiconfig"

Index ¶

• Constants
• func CreateClusterRoleBindings(clientset *clientset.Clientset) error
• func CreateRBACRules(clientset *clientset.Clientset) error
• func CreateRoleBindings(clientset *clientset.Clientset) error
• func CreateRoles(clientset *clientset.Clientset) error
• func CreateServiceAccounts(clientset *clientset.Clientset) error
• func UpdateMasterRoleLabelsAndTaints(client *clientset.Clientset) error

Constants ¶

const (
	// KubeProxyClusterRoleName sets the name for the kube-proxy ClusterRole
	KubeProxyClusterRoleName = "system:node-proxier"
	// NodeBootstrapperClusterRoleName sets the name for the TLS Node Bootstrapper ClusterRole
	NodeBootstrapperClusterRoleName = "system:node-bootstrapper"
	// BootstrapSignerClusterRoleName sets the name for the ClusterRole that allows access to ConfigMaps in the kube-public ns
	BootstrapSignerClusterRoleName = "system:bootstrap-signer-clusterinfo"
)

Functions ¶

func CreateClusterRoleBindings ¶

func CreateClusterRoleBindings(clientset *clientset.Clientset) error

CreateClusterRoleBindings creates all necessary bindings between bootstrapped & kubeadm-created ClusterRoles and subjects kubeadm is using

func CreateRBACRules ¶

func CreateRBACRules(clientset *clientset.Clientset) error

CreateRBACRules creates the essential RBAC rules for a minimally set-up cluster

func CreateRoleBindings ¶

func CreateRoleBindings(clientset *clientset.Clientset) error

CreateRoleBindings creates all namespaced and necessary bindings between bootstrapped & kubeadm-created ClusterRoles and subjects kubeadm is using

func CreateRoles ¶

func CreateRoles(clientset *clientset.Clientset) error

CreateRoles creates namespaces RBAC Roles

func CreateServiceAccounts ¶

func CreateServiceAccounts(clientset *clientset.Clientset) error

CreateServiceAccounts creates the necessary serviceaccounts that kubeadm uses/might use.

func UpdateMasterRoleLabelsAndTaints ¶

func UpdateMasterRoleLabelsAndTaints(client *clientset.Clientset) error

UpdateMasterRoleLabelsAndTaints taints the master and sets the master label

Source Files ¶

clusterroles.go setupmaster.go