Documentation
¶
Index ¶
- Constants
- func GetLoadBalancerSourceRanges(service *api.Service) (netsets.IPNet, error)
- func GetServiceHealthCheckNodePort(service *api.Service) int32
- func GetServiceHealthCheckPathPort(service *api.Service) (string, int32)
- func IsAllowAll(ipnets netsets.IPNet) bool
- func NeedsHealthCheck(service *api.Service) bool
Constants ¶
const (
// AnnotationLoadBalancerSourceRangesKey is the key of the annotation on a service to set allowed ingress ranges on their LoadBalancers
//
// It should be a comma-separated list of CIDRs, e.g. `0.0.0.0/0` to
// allow full access (the default) or `18.0.0.0/8,56.0.0.0/8` to allow
// access only from the CIDRs currently allocated to MIT & the USPS.
//
// Not all cloud providers support this annotation, though AWS & GCE do.
AnnotationLoadBalancerSourceRangesKey = "service.beta.kubernetes.io/load-balancer-source-ranges"
// AnnotationExternalTraffic An annotation that denotes if this Service desires to route external traffic to local
// endpoints only. This preserves Source IP and avoids a second hop.
AnnotationExternalTraffic = "service.alpha.kubernetes.io/external-traffic"
// AnnotationValueExternalTrafficLocal Value of annotation to specify local endpoints behaviour
AnnotationValueExternalTrafficLocal = "OnlyLocal"
// AnnotationValueExternalTrafficGlobal Value of annotation to specify global (legacy) behaviour
AnnotationValueExternalTrafficGlobal = "Global"
// AnnotationHealthCheckNodePort Annotation specifying the healthcheck nodePort for the service
// If not specified, annotation is created by the service api backend with the allocated nodePort
// Will use user-specified nodePort value if specified by the client
AnnotationHealthCheckNodePort = "service.alpha.kubernetes.io/healthcheck-nodeport"
)
Variables ¶
This section is empty.
Functions ¶
func GetLoadBalancerSourceRanges ¶
func GetLoadBalancerSourceRanges(service *api.Service) (netsets.IPNet, error)
GetLoadBalancerSourceRanges first try to parse and verify LoadBalancerSourceRanges field from a service. If the field is not specified, turn to parse and verify the AnnotationLoadBalancerSourceRangesKey annotation from a service, extracting the source ranges to allow, and if not present returns a default (allow-all) value.
func GetServiceHealthCheckNodePort ¶ added in v1.4.0
func GetServiceHealthCheckNodePort(service *api.Service) int32
GetServiceHealthCheckNodePort Return health check node port annotation for service, if one exists
func GetServiceHealthCheckPathPort ¶ added in v1.4.0
func GetServiceHealthCheckPathPort(service *api.Service) (string, int32)
GetServiceHealthCheckPathPort Return the path and nodePort programmed into the Cloud LB Health Check
func IsAllowAll ¶
func IsAllowAll(ipnets netsets.IPNet) bool
IsAllowAll checks whether the netsets.IPNet allows traffic from 0.0.0.0/0
func NeedsHealthCheck ¶ added in v1.4.0
func NeedsHealthCheck(service *api.Service) bool
NeedsHealthCheck Check service for health check annotations
Types ¶
This section is empty.