externalipranger

Documentation

Index

• Constants
• func NewExternalIPRanger(reject, admit []*net.IPNet, allowIngressIP bool) *externalIPRanger
• func ParseRejectAdmitCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)
• func RegisterExternalIP(plugins *admission.Plugins)
• type NetworkSlice
  • func (s NetworkSlice) Contains(ip net.IP) bool

Constants

const ExternalIPPluginName = "ExternalIPRanger"

Functions

func NewExternalIPRanger

func NewExternalIPRanger(reject, admit []*net.IPNet, allowIngressIP bool) *externalIPRanger

NewConstraint creates a new SCC constraint admission plugin.

func ParseRejectAdmitCIDRRules

func ParseRejectAdmitCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)

ParseRejectAdmitCIDRRules calculates a blacklist and whitelist from a list of string CIDR rules (treating a leading ! as a negation). Returns an error if any rule is invalid.

func RegisterExternalIP

func RegisterExternalIP(plugins *admission.Plugins)

Types

type NetworkSlice

type NetworkSlice []*net.IPNet

NetworkSlice is a helper for checking whether an IP is contained in a range of networks.

func (NetworkSlice) Contains

func (s NetworkSlice) Contains(ip net.IP) bool