admission

Documentation

Index

• Constants
• type AdmissionController
  • func InitAdmissionController(conf *conf.AdmissionControllerConf, pcCache *PriorityClassCache, ...) *AdmissionController
  • func (c *AdmissionController) Health(w http.ResponseWriter, r *http.Request)
  • func (c *AdmissionController) Serve(w http.ResponseWriter, r *http.Request)
• type Informers
  • func NewInformers(kubeClient client.KubeClient, namespace string) *Informers
  • func (i *Informers) Start()
  • func (i *Informers) Stop()
• type NamespaceCache
  • func NewNamespaceCache(namespaces informersv1.NamespaceInformer) (*NamespaceCache, error)
• type PriorityClassCache
  • func NewPriorityClassCache(priorityClasses informersv1.PriorityClassInformer) (*PriorityClassCache, error)
• type ValidateConfResponse
• type WebhookManager
  • func NewWebhookManager(conf *conf.AdmissionControllerConf) (WebhookManager, error)

Constants

const (
	UNSET triState = iota - 1
	FALSE
	TRUE
)

Types

type AdmissionController

type AdmissionController struct {
	// contains filtered or unexported fields
}

func InitAdmissionController

func InitAdmissionController(conf *conf.AdmissionControllerConf, pcCache *PriorityClassCache, nsCache *NamespaceCache) *AdmissionController

func (*AdmissionController) Health

func (c *AdmissionController) Health(w http.ResponseWriter, r *http.Request)

func (*AdmissionController) Serve

func (c *AdmissionController) Serve(w http.ResponseWriter, r *http.Request)

type Informers

type Informers struct {
	ConfigMap     informersv1.ConfigMapInformer
	PriorityClass schedulinginformersv1.PriorityClassInformer
	Namespace     informersv1.NamespaceInformer
	// contains filtered or unexported fields
}

func NewInformers

func NewInformers(kubeClient client.KubeClient, namespace string) *Informers

func (*Informers) Start

func (i *Informers) Start()

func (*Informers) Stop

func (i *Informers) Stop()

type NamespaceCache

type NamespaceCache struct {
	locking.RWMutex
	// contains filtered or unexported fields
}

func NewNamespaceCache

func NewNamespaceCache(namespaces informersv1.NamespaceInformer) (*NamespaceCache, error)

NewNamespaceCache creates a new cache and registers the handler for the cache with the Informer.

type PriorityClassCache

type PriorityClassCache struct {
	locking.RWMutex
	// contains filtered or unexported fields
}

func NewPriorityClassCache

func NewPriorityClassCache(priorityClasses informersv1.PriorityClassInformer) (*PriorityClassCache, error)

NewPriorityClassCache creates a new cache and registers the handler for the cache with the Informer.

type ValidateConfResponse

type ValidateConfResponse struct {
	Allowed bool   `json:"allowed"`
	Reason  string `json:"reason"`
}

type WebhookManager

type WebhookManager interface {
	// LoadCACertificates is used to load CA certs from K8s secrets and update if needed
	LoadCACertificates() error

	// InstallWebhooks is used to install or update webhooks
	InstallWebhooks() error

	// GenerateServerCertificate is used to generate a server certificate chain
	GenerateServerCertificate() (*tls.Certificate, error)

	// WaitForCertificateExpiration blocks until certificates need to be renewed
	WaitForCertificateExpiration()
}

WebhookManager is used to handle all registration requirements for the webhook, including certificates

func NewWebhookManager

func NewWebhookManager(conf *conf.AdmissionControllerConf) (WebhookManager, error)

NewWebhookManager is used to create a new webhook manager