automount

Documentation

Index

• Variables
• func NewServer(mgr manager.Manager, namespace string) (*webhook.Server, error)
• func NewWebhook(mgr manager.Manager) (*admission.Webhook, error)
• type Handler
  • func (h *Handler) Handle(ctx context.Context, req atypes.Request) atypes.Response
  • func (h *Handler) InjectClient(c client.Client) error
  • func (h *Handler) InjectDecoder(d atypes.Decoder) error

Variables

var (
	AnnotationKeyServiceAccountImportName = "multicluster.admiralty.io/service-account-import.name"
)

Functions

func NewServer

func NewServer(mgr manager.Manager, namespace string) (*webhook.Server, error)

func NewWebhook

func NewWebhook(mgr manager.Manager) (*admission.Webhook, error)

https://kubernetes.slack.com/archives/CAR30FCJZ/p1547254570666900

Types

type Handler

type Handler struct {
	// contains filtered or unexported fields
}

Handler handles pod admission requests, mutating pods that request service account imports. It is implemented by the service-account-import-admission-controller command, via controller-runtime. If a pod is annotated with the "multicluster.admiralty.io/service-account-import.name" key, where the value is a comma-separated list of service account import names, for each service account import, a volume is added to the pod, sourced from the first secret listed by the service account import, and mounted in each of the pod's containers under /var/run/secrets/admiralty.io/serviceaccountimports/%s, where %s is the service account import name.

func (*Handler) Handle

func (h *Handler) Handle(ctx context.Context, req atypes.Request) atypes.Response

func (*Handler) InjectClient

func (h *Handler) InjectClient(c client.Client) error

InjectClient injects the client.

func (*Handler) InjectDecoder

func (h *Handler) InjectDecoder(d atypes.Decoder) error

InjectDecoder injects the decoder.