computionadmission

README

Compution

Admission Controller

This is a ValidatingAdmissionWebhook, that denies compute resources if they reference non-compliant (i.e. not under /sox/ ) artifacts when the service requires PRGB compliance.

Controller (TODO)

This monitors compute resources, and ensures that Service Central has a compute record for each compute resource.

See Also

• https://hello.atlassian.net/wiki/spaces/VDEV/pages/325687047/ServiceCentralComputeRecord+Controller

• https://hello.atlassian.net/wiki/spaces/MDEV/pages/318660754/Sync+EC2+Compute+Provider+versus+Microscope

Documentation

Index

• type AdmissionContext
  • func (ac *AdmissionContext) SetupAdmissionWebhooks(router *chi.Mux) error

Types

type AdmissionContext

type AdmissionContext struct {
	ConfigMapInformer       cache.SharedIndexInformer
	NamespaceInformer       cache.SharedIndexInformer
	EnforcePRGB             bool
	CompliantDockerPrefixes []string
}

AdmissionContext holds context for compution admission controller like router, informers etc

func (*AdmissionContext) SetupAdmissionWebhooks

func (ac *AdmissionContext) SetupAdmissionWebhooks(router *chi.Mux) error

SetupAdmissionWebhooks handles creating a route for the mutating webhook