config

Documentation

Index

• Constants
• Variables
• func CreateClientConfig(kubeconfig string) (*rest.Config, error)
• func LogDefaultFlags()
• type ConfigData
  • func NewConfigData(rclient kubernetes.Interface, cmInformer informers.ConfigMapInformer, ...) *ConfigData
  • func (cd *ConfigData) Run(stopCh <-chan struct{})
  • func (cd *ConfigData) ToFilter(kind, namespace, name string) bool
• type Interface

Constants

const (
	// These constants MUST be equal to the corresponding names in service definition in definitions/install.yaml
	KubePolicyNamespace = "kyverno"
	WebhookServiceName  = "kyverno-svc"

	MutatingWebhookConfigurationName      = "kyverno-resource-mutating-webhook-cfg"
	MutatingWebhookConfigurationDebugName = "kyverno-resource-mutating-webhook-cfg-debug"
	MutatingWebhookName                   = "nirmata.kyverno.resource.mutating-webhook"

	VerifyMutatingWebhookConfigurationName      = "kyverno-verify-mutating-webhook-cfg"
	VerifyMutatingWebhookConfigurationDebugName = "kyverno-verify-mutating-webhook-cfg-debug"
	VerifyMutatingWebhookName                   = "nirmata.kyverno.verify-mutating-webhook"

	PolicyValidatingWebhookConfigurationName      = "kyverno-policy-validating-webhook-cfg"
	PolicyValidatingWebhookConfigurationDebugName = "kyverno-policy-validating-webhook-cfg-debug"
	PolicyValidatingWebhookName                   = "nirmata.kyverno.policy-validating-webhook"

	PolicyMutatingWebhookConfigurationName      = "kyverno-policy-mutating-webhook-cfg"
	PolicyMutatingWebhookConfigurationDebugName = "kyverno-policy-mutating-webhook-cfg-debug"
	PolicyMutatingWebhookName                   = "nirmata.kyverno.policy-mutating-webhook"

	// Due to kubernetes issue, we must use next literal constants instead of deployment TypeMeta fields
	// Issue: https://github.com/kubernetes/kubernetes/pull/63972
	// When the issue is closed, we should use TypeMeta struct instead of this constants
	DeploymentKind           = "Deployment"
	DeploymentAPIVersion     = "extensions/v1beta1"
	KubePolicyDeploymentName = "kyverno"
)

Variables

var (
	MutatingWebhookServicePath         = "/mutate"
	ValidatingWebhookServicePath       = "/validate"
	PolicyValidatingWebhookServicePath = "/policyvalidate"
	PolicyMutatingWebhookServicePath   = "/policymutate"
	VerifyMutatingWebhookServicePath   = "/verifymutate"

	SupportedKinds = []string{
		"ConfigMap",
		"CronJob",
		"DaemonSet",
		"Deployment",
		"Endpoints",
		"HorizontalPodAutoscaler",
		"Ingress",
		"Job",
		"LimitRange",
		"Namespace",
		"NetworkPolicy",
		"PersistentVolumeClaim",
		"PodDisruptionBudget",
		"PodTemplate",
		"ResourceQuota",
		"Secret",
		"Service",
		"StatefulSet",
	}
)

Functions

func CreateClientConfig

func CreateClientConfig(kubeconfig string) (*rest.Config, error)

CreateClientConfig creates client config

func LogDefaultFlags

func LogDefaultFlags()

LogDefaults sets default glog flags

Types

type ConfigData

type ConfigData struct {
	// contains filtered or unexported fields
}

func NewConfigData

func NewConfigData(rclient kubernetes.Interface, cmInformer informers.ConfigMapInformer, filterK8Resources string) *ConfigData

NewConfigData ...

func (*ConfigData) Run

func (cd *ConfigData) Run(stopCh <-chan struct{})

Run checks syncing

func (*ConfigData) ToFilter

func (cd *ConfigData) ToFilter(kind, namespace, name string) bool

ToFilter checks if the given resource is set to be filtered in the configuration

type Interface

type Interface interface {
	ToFilter(kind, namespace, name string) bool
}

Interface to be used by consumer to check filters