Documentation ¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
var (
AnnotationKeyServiceAccountImportName = "multicluster.admiralty.io/service-account-import.name"
)
Functions ¶
func NewWebhook ¶ added in v0.3.0
https://kubernetes.slack.com/archives/CAR30FCJZ/p1547254570666900
Types ¶
type Handler ¶
type Handler struct {
// contains filtered or unexported fields
}
Handler handles pod admission requests, mutating pods that request service account imports. It is implemented by the service-account-import-admission-controller command, via controller-runtime. If a pod is annotated with the "multicluster.admiralty.io/service-account-import.name" key, where the value is a comma-separated list of service account import names, for each service account import, a volume is added to the pod, sourced from the first secret listed by the service account import, and mounted in each of the pod's containers under /var/run/secrets/admiralty.io/serviceaccountimports/%s, where %s is the service account import name.
func (*Handler) InjectClient ¶
InjectClient injects the client.