Build returns a list of auxiliary openshift/k8s objects for lokistack gateway deployments on OpenShift.

BuildClusterRole returns a k8s ClusterRole object for the lokistack gateway serviceaccount to allow creating: - TokenReviews to authenticate the user by bearer token.

BuildClusterRoleBinding returns a k8s ClusterRoleBinding object for the lokistack gateway serviceaccount to grant access to: - rbac.authentication.k8s.io/TokenReviews - rbac.authorization.k8s.io/SubjectAccessReviews.

BuildRoute builds an OpenShift route object for the LokiStack Gateway.

BuildServiceAccount returns a k8s object for the LokiStack Gateway serviceaccount.

BuildServiceCAConfigMap returns a k8s configmap for the LokiStack gateway serviceCA configmap.

ConfigureGatewayDeployment merges an OpenPolicyAgent sidecar into the deployment spec.

ConfigureGatewayService merges the OpenPolicyAgent sidecar metrics port into the service spec.

ConfigureGatewayServiceMonitor merges the OpenPolicyAgent sidecar endpoint into the service monitor.

NewOptions returns an openshift options struct.

GatewayOPAHTTPPort is the HTTP port of the OpenPolicyAgent sidecar.

GatewayOPAHTTPPortName is the HTTP container port name of the OpenPolicyAgent sidecar.

GatewayOPAInternalPort is the HTTP metrics port of the OpenPolicyAgent sidecar.

GatewayOPAInternalPortName is the HTTP container metrics port name of the OpenPolicyAgent sidecar.

InjectCABundleKey is the annotation key for configmaps used by the cert-signing service to inject the service CA into the annotated configmap.

ServingCertKey is the annotation key for services used the cert-signing service to create a new key/cert pair signed by the service CA stored in a secret with the same name as the annotated service.

AuthenticationSpec describes the authentication specification for a single tenant to authenticate it's subjects through OpenShift Auth.

AuthorizationSpec describes the authorization specification for all tenants to authorize access for it's subjects through the opa-openshift sidecar.

BuildOptions represents the set of options required to build extra lokistack gateway k8s objects (e.g.

Options is the set of internal template options for rendering the lokistack-gateway tenants configuration file when mode openshift-logging.

TenantData defines the existing tenantID and cookieSecret for lokistack reconcile.