Ir al contenido
Español

KubernetesApiSeedProviderOptionsType

Esta página aún no está disponible en tu idioma.

KubernetesApiSeedProviderOptionsType = object

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:6

Plain options-object shape accepted by a KubernetesApiSeedProvider.

readonly optional fetchEndpoints?: () => Promise<string[]>

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:16

Override the Endpoints-fetch function — defaults to the in-cluster API.

Promise<string[]>


readonly optional log?: (message, error?) => void

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:34

Reports addresses dropped by pinnedAddresses. Default: no-op.

string

unknown

void


readonly namespace: string

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:8

Target namespace to look up endpoints in.


readonly optional pinnedAddresses?: readonly string[]

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:29

CIDRs the pod IPs must fall inside. Endpoints are IPs, so entries are CIDRs only — a host suffix could never match and is rejected. Unset means no pinning.

The K8s path is already the better-defended one: the default fetcher pins TLS to the ServiceAccount CA, so it does not inherit DNS’s trust problem the way DnsSeedProviderOptionsType does. What this guards is the layer above — an Endpoints object may name any IP, including one outside the cluster, and RBAC that can write Endpoints is a much cheaper find than a CA key.


readonly port: number

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:14

Port for the cluster remoting endpoint on each pod.


readonly serviceName: string

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:10

Service or Endpoints name whose backing pods provide the cluster.


readonly systemName: string

Defined in: src/discovery/KubernetesApiSeedProviderOptions.ts:12

System name stamped on the discovered NodeAddresses.