kubernetes options 源码
kubernetes options 代码
文件路径：/staging/src/k8s.io/pod-security-admission/cmd/webhook/server/options/options.go
/*
Copyright 2021 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package options
import (
"github.com/spf13/pflag"
apiserveroptions "k8s.io/apiserver/pkg/server/options"
)
const (
DefaultPort = 8443
DefaultInsecurePort = 8080
DefaultClientQPSLimit = 20
DefaultClientQPSBurst = 50
)
// Options has all the params needed to run a PodSecurity webhook.
type Options struct {
// Kubeconfig is the file path to the KubeConfig file to use. Only for out-of-cluster configuration.
Kubeconfig string
// Config is the file path to the PodSecurity configuration file.
Config string
ClientQPSLimit float32
ClientQPSBurst int
SecureServing apiserveroptions.SecureServingOptions
InsecureServing apiserveroptions.DeprecatedInsecureServingOptions
}
func NewOptions() *Options {
secureServing := apiserveroptions.NewSecureServingOptions()
secureServing.ServerCert.PairName = "webhook"
o := &Options{
SecureServing: *secureServing,
InsecureServing: apiserveroptions.DeprecatedInsecureServingOptions{},
ClientQPSLimit: DefaultClientQPSLimit,
ClientQPSBurst: DefaultClientQPSBurst,
}
o.SecureServing.BindPort = DefaultPort
o.InsecureServing.BindPort = DefaultInsecurePort
return o
}
func (o *Options) AddFlags(fs *pflag.FlagSet) {
fs.StringVar(&o.Kubeconfig, "kubeconfig", o.Kubeconfig, "Path to the kubeconfig file specifying how to connect to the API server. Leave empty to use an in-cluster config.")
fs.StringVar(&o.Config, "config", o.Config, "The path to the PodSecurity configuration file.")
fs.Float32Var(&o.ClientQPSLimit, "client-qps-limit", o.ClientQPSLimit, "Client QPS limit for throttling requests to the API server.")
fs.IntVar(&o.ClientQPSBurst, "client-qps-burst", o.ClientQPSBurst, "Client QPS burst limit for throttling requests to the API server.")
o.SecureServing.AddFlags(fs)
o.InsecureServing.AddFlags(fs)
}
// Validate validates all the required options.
func (o *Options) Validate() []error {
var errs []error
errs = append(errs, o.SecureServing.Validate()...)
errs = append(errs, o.InsecureServing.Validate()...)
return errs
}
相关信息
相关文章
kubernetes apiserver_etcd_test 源码
kubernetes apiserver_kms_test 源码
kubernetes append_or_replace_prefixed_line_test 源码
kubernetes audit_policy_test 源码
0
赞
热门推荐
-
2、 - 优质文章
-
3、 gate.io
-
7、 golang
-
9、 openharmony