admission

Documentation

Index

• Constants
• func NewExternalIPRanger(reject, admit []*net.IPNet, allowIngressIP bool) *externalIPRanger
• func NewRestrictedEndpointsAdmission(restrictedNetworks []*net.IPNet) *restrictedEndpointsAdmission
• func ParseRejectAdmitCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)
• func ParseSimpleCIDRRules(rules []string) (networks []*net.IPNet, err error)
• func RegisterExternalIP(plugins *admission.Plugins)
• func RegisterRestrictedEndpoints(plugins *admission.Plugins)
• type NetworkSlice
  • func (s NetworkSlice) Contains(ip net.IP) bool

Constants

const ExternalIPPluginName = "ExternalIPRanger"

const RestrictedEndpointsPluginName = "openshift.io/RestrictedEndpointsAdmission"

Functions

func NewExternalIPRanger

func NewExternalIPRanger(reject, admit []*net.IPNet, allowIngressIP bool) *externalIPRanger

NewConstraint creates a new SCC constraint admission plugin.

func NewRestrictedEndpointsAdmission

func NewRestrictedEndpointsAdmission(restrictedNetworks []*net.IPNet) *restrictedEndpointsAdmission

NewRestrictedEndpointsAdmission creates a new endpoints admission plugin.

func ParseRejectAdmitCIDRRules

func ParseRejectAdmitCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)

ParseRejectAdmitCIDRRules calculates a blacklist and whitelist from a list of string CIDR rules (treating a leading ! as a negation). Returns an error if any rule is invalid.

func ParseSimpleCIDRRules

func ParseSimpleCIDRRules(rules []string) (networks []*net.IPNet, err error)

ParseSimpleCIDRRules parses a list of CIDR strings

func RegisterExternalIP

func RegisterExternalIP(plugins *admission.Plugins)

func RegisterRestrictedEndpoints

func RegisterRestrictedEndpoints(plugins *admission.Plugins)

Types

type NetworkSlice

type NetworkSlice []*net.IPNet

NetworkSlice is a helper for checking whether an IP is contained in a range of networks.

func (NetworkSlice) Contains

func (s NetworkSlice) Contains(ip net.IP) bool