psp

Documentation

Index

• func BuildPSP(cr CRDObject) *v1beta1.PodSecurityPolicy
• func CreateOrUpdateServiceAccountWithPSP(ctx context.Context, cr CRDObject, rclient client.Client) error
• func CreateServiceAccountForCRD(ctx context.Context, cr CRDObject, rclient client.Client) error
• func DeletePSPChain(ctx context.Context, rclient client.Client, crd CRDObject) error
• type CRDObject

Functions

func BuildPSP

func BuildPSP(cr CRDObject) *v1beta1.PodSecurityPolicy

func CreateOrUpdateServiceAccountWithPSP

func CreateOrUpdateServiceAccountWithPSP(ctx context.Context, cr CRDObject, rclient client.Client) error

CreateOrUpdateServiceAccountWithPSP - creates psp for api object. ensure that ServiceAccount exists, PodSecurityPolicy exists, we only update it, if its our PSP. ClusterRole exists, ClusterRoleBinding exists.

func CreateServiceAccountForCRD

func CreateServiceAccountForCRD(ctx context.Context, cr CRDObject, rclient client.Client) error

func DeletePSPChain

func DeletePSPChain(ctx context.Context, rclient client.Client, crd CRDObject) error

DeletePSPChain - removes psp, cluster role and cluster role binding, on finalize request for given CRD

Types

type CRDObject

type CRDObject interface {
	AsOwner() []metav1.OwnerReference
	Annotations() map[string]string
	Labels() map[string]string
	PrefixedName() string
	GetServiceAccountName() string
	GetPSPName() string
	GetNSName() string
}