Module KubeSource

Sourcemodule Admission : sig ... end

Kubernetes admission.k8s.io/v1 request handling. The protocol layer is independent of the webhook transport so handlers can be tested without a socket or certificate.

Sourcemodule Cached_client : sig ... end

Typed cache-backed reads paired with live Kubernetes writes.

Sourcemodule Cancel : sig ... end

Cooperative cancellation shared by requests, reflectors, schedulers, and controllers. Cancellation is idempotent and safe across system threads.

Sourcemodule Client : sig ... end

Typed Kubernetes HTTP operations, list pagination, patches, and watches.

module Clock : sig ... end
Sourcemodule Config : sig ... end

Kubernetes connection and authentication configuration.

Sourcemodule Controller : sig ... end

Reflector-backed reconciliation controllers.

Sourcemodule Conversion : sig ... end

Kubernetes apiextensions.k8s.io/v1 CRD conversion webhook protocol.

Sourcemodule Core : sig ... end

Kubernetes API machinery types shared by typed and dynamic resources.

module Crypto_runtime : sig ... end
Sourcemodule Diagnostics : sig ... end

Native HTTP server for Kubernetes health probes and Prometheus scraping. The default bind address is loopback; callers must explicitly select a pod-visible address such as 0.0.0.0.

Sourcemodule Discovery : sig ... end

Kubernetes API group and resource discovery.

Sourcemodule Dynamic : sig ... end

Unstructured access to resources discovered or defined at runtime. The original JSON object is retained so unknown fields survive round trips.

Sourcemodule Events : sig ... end

Best-effort Kubernetes Event recording through events.k8s.io/v1. Events are supplemental diagnostics and a failure to publish one should not be treated as proof that the reconciled operation failed.

Sourcemodule Health : sig ... end

Thread-safe liveness and readiness check registry.

Sourcemodule Http : sig ... end

Blocking, cancellation-aware HTTP/1.1 transport for the Kubernetes API. Successful streaming responses invoke on_chunk without retaining the body. Non-streaming and error responses are bounded by max_body_bytes. The transport owns Host, Content-Length, Transfer-Encoding, and Connection.

Sourcemodule Leader_election : sig ... end

High-availability leader election using coordination.k8s.io/v1 Lease objects. Expiry decisions use local observation time and do not trust clocks embedded in remote Lease records.

Sourcemodule Log : sig ... end

Thread-safe structured logging for client and controller components.

Sourcemodule Manager : sig ... end

Structured supervision and composition for long-running controller components. Components may declare shared dependencies; each dependency is started exactly once by a manager.

Sourcemodule Metrics : sig ... end

Minimal thread-safe Prometheus text-format metrics. Metric families are registered explicitly and each handle represents one fixed label set.

Sourcemodule Operator : sig ... end

Batteries-included process lifecycle for Kubernetes operators.

Sourcemodule Port_forward : sig ... end

Kubernetes Pod port forwarding over the WebSocket SPDY tunnel.

Sourcemodule Rate_limiter : sig ... end

Cancellation-aware token-bucket request throttling.

Sourcemodule Reconcile : sig ... end

Common idempotent write patterns for reconcilers.

Sourcemodule Reflector : sig ... end

Typed LIST/WATCH reflectors with thread-safe local stores. A reflector is a shareable manager dependency: multiple controllers may subscribe to one API stream and cache.

Sourcemodule Remote_command : sig ... end

Kubernetes Pod exec and attach over versioned channel WebSockets.

Sourcemodule Retry : sig ... end

Kubernetes-aware retry helpers for optimistic writes.

module Spdy : sig ... end
module Spdy_zlib : sig ... end
Sourcemodule Store : sig ... end

Thread-safe local resource stores used by reflectors and reconcilers.

module Wakeup : sig ... end
Sourcemodule Webhook : sig ... end

Supervised HTTPS server for Kubernetes admission webhooks. Connections, request headers, and request bodies are bounded; every connection has a cancellation-aware monotonic deadline.

Sourcemodule Websocket : sig ... end

RFC 6455 client transport used by Kubernetes streaming subresources.

Sourcemodule Work_queue : sig ... end

Level-triggered, dirty-key-deduplicating controller work queues. A key is never returned to two workers concurrently.

module Yaml_lite : sig ... end