EnsureNetworkPolicyIsUpdated checks if the provided network policy needs an update.

GenerateNewAdminServiceForDataPlane is a helper to generate the headless dataplane admin service.

GenerateNewClusterRoleBindingForCertificateConfig is a helper to generate a ClusterRoleBinding to be used by the certificateConfig jobs.

GenerateNewClusterRoleBindingForControlPlane is a helper to generate a ClusterRoleBinding resource to bind roles to the service account used by the controlplane deployment.

GenerateNewClusterRoleForCertificateConfig is a helper to generate a ClusterRole to be used by the certificateConfig jobs.

GenerateNewClusterRoleForControlPlane is a helper function that extract the version from the tag, and returns the ClusterRole with all the needed permissions.

GenerateNewDeploymentForControlPlane generates a new Deployment for the ControlPlane.

GenerateNewDeploymentForDataPlane generates a new Deployment for the DataPlane.

GenerateNewIngressServiceForDataplane is a helper to generate the dataplane ingress service.

GenerateNewRoleBindingForCertificateConfig is a helper to generate a RoleBinding to be used by the certificateConfig jobs.

GenerateNewRoleForCertificateConfig is a helper to generate a Role to be used by the certificateConfig jobs.

GenerateNewServiceAccountForCertificateConfig is a helper to generate a ServiceAccount to be used by the certificateConfig jobs.

GenerateNewServiceAccountForControlPlane is a helper to generate a ServiceAccount to be used by the controlplane deployment.

GenerateNewServiceForCertificateConfig is a helper to generate a service to expose the operator webhook.

GenerateNewTLSSecret is a helper to generate a TLS Secret to be used for mutual TLS.

GenerateNewValidatingWebhookConfiguration is a helper to generate a ValidatingWebhookConfiguration.

GenerateNewWebhookCertificateConfigJob generates the create and patch jobs for the certificateConfig.

IsContainerResourceEmpty determines if the provided resource requirements is effectively "empty" in that all fields are unset.

LabelObjectAsControlPlaneManaged ensures that labels are set on the provided object to signal that it's owned by a ControlPlane resource and that its lifecycle is managed by this operator.

LabelObjectAsDataPlaneManaged ensures that labels are set on the provided object to signal that it's owned by a DataPlane resource and that its lifecycle is managed by this operator.

ResourceRequirementsEqual compares two corev1.ResourceRequirements.

StrategicMergePatchPodTemplateSpec adds patches to base using a strategic merge patch and iterating by container name, failing on the first error.

WithClusterCertificateMount returns a DelpoymentOpt which adds a cluster certificate Volume mount to Deployment's PodSpec using the provided volume name.

WithTLSVolumeFromSecret returns a DelpoymentOpt which adds a TLS Volume to Deployment's PodSpec using the provided volume name and secret name to reference.