CNIPluginFinalizedObjects returns a list of objects that use the CNIFinalizer that should be removed only after the CNI plugin is removed.

CreateCertificateConfigMap is a convenience method for creating a configmap that contains only a ca or cert to trust.

CreateCertificateSecret is a convenience method for creating a secret that contains only a ca or cert to trust.

CreateOperatorSecretsRoleBinding binds the tigera-operator-secrets ClusterRole to the operator's ServiceAccount in the given namespace, granting permission to manipulate secrets.

DefaultWindowsCNIDirectories returns the CNI binary, network config and log directories and the CNI conf filename for the configured platform.

GetIPv4Pool returns the IPv4 IPPool in an installation, or nil if one can't be found.

GetIPv6Pool returns the IPv6 IPPool in an installation, or nil if one can't be found.

ImagePullPolicy returns the image pull policy to use for all components.

LinseedNamespace determine the namespace in which Linseed is running.

LogStorage renders the components necessary for kibana and elasticsearch.

Manager returns a component for rendering namespaced manager resources.

ManagerService determine the name of the tigera manager service.

Create a new DexConfig.

NewManagedClusterLogStorage returns a component for managed cluster log storage resources.

Node creates the node daemonset and other resources for the daemonset to operate normally.

The following functions are helpers for determining resource names based on the configured product variant.

Typha creates the typha daemonset and other resources for the daemonset to operate normally.

Use the same API server container name for both OSS and Enterprise.

APIServerFinalizer is added to the Installation by the API server controller when installing the API server so that Calico CNI resources are not removed until the API server controller has had time to properly tear down pods.

Volume name that is added by ECK for the purpose of mounting certs.

ServiceAccount names.

Volume that is added by ECK and is overridden if certificate management is used.

Volume that is added by ECK and is overridden if certificate management is used.

Default claims to use to data from a JWT.

The names of the components related to the PolicyRecommendation APIs related rendered objects.

FluentdPrometheusTLSSecretName is the name of the secret containing the key pair fluentd presents to identify itself.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

The names of the components related to the Guardian related rendered objects.

InstallationControllerFinalizer is added to the Installation by the core Installation controller when installing Calico so that Calico CNI resources are not removed until calico-kube-controllers has had time to properly be torn down.

Linseed vars.

Constants for Linseed token volume mounting in managed clusters.

OperatorCompleteFinalizer is applied by the core controller as part of Installation defaulting to ensure it can clean up resources if the Installation is ever deleted.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PacketCapture APIs related rendered objects.

The names of the components related to the PolicyRecommendation APIs related rendered objects.

The names of the components related to the PolicyRecommendation APIs related rendered objects.

The names of the components related to the PolicyRecommendation APIs related rendered objects.

The names of the components related to the PolicyRecommendation APIs related rendered objects.

The names of the components related to the PolicyRecommendation APIs related rendered objects.

TigeraElasticsearchGatewaySecret is the TLS key pair that is mounted by Elasticsearch gateway.

TigeraElasticsearchInternalCertSecret is the TLS key pair that is mounted by the Elasticsearch pods.

TigeraLinseedSecret is the name of the secret that holds the TLS key pair mounted into Linseed.

TigeraLinseedSecretsClusterRole is the name of the ClusterRole used to make RoleBindings in namespaces where Linseed needs to be able to manipulate secrets.

TigeraLinseedTokenSecret is the name of the secret that holds the access token signing key for Linseed.

The name of the TLS certificate used by Voltron to authenticate connections from managed cluster clients talking to Linseed.

ManagementClusterConnection configuration constants.

ManagementClusterConnection configuration constants.

Register secret/certs that need Server and Client Key usage.

APIServerConfiguration contains all the config information needed to render the component.

AWSSGSetupConfiguration contains all the config information needed to render the component.

ComplianceConfiguration contains all the config information needed to render the component.

DexComponentConfiguration contains all the config information needed to render the component.

ElasticsearchConfiguration contains all the config information needed to render the component.

FluentdConfiguration contains all the config information needed to render the component.

GuardianConfiguration contains all the config information needed to render the component.

IntrusionDetectionConfiguration contains all the config information needed to render the component.

ManagedClusterLogStorageConfiguration contains configuration for managed cluster log storage.

ManagerConfiguration contains all the config information needed to render the component.

NamespaceConfiguration contains all the config information needed to render the component.

NodeConfiguration is the public API used to provide information to the render code to generate Kubernetes objects for installing calico/node on a cluster.

PacketCaptureApiConfiguration contains all the config information needed to render the component.

PolicyRecommendationConfiguration contains all the config information needed to render the component.

TyphaConfiguration is the public API used to provide information to the render code to generate Kubernetes objects for installing calico/typha on a cluster.

TyphaNodeTLS holds configuration for Node and Typha to establish TLS.

DexConfig is a config for DexIdP itself.

A Renderer is capable of generating components to be installed on the cluster.