scdeny

Documentation

Index

• Constants
• func Register(plugins *admission.Plugins)
• type Plugin
  • func NewSecurityContextDeny() *Plugin
  • func (p *Plugin) Validate(a admission.Attributes) (err error)

Constants

const PluginName = "SecurityContextDeny"

PluginName indicates name of admission plugin.

Functions

func Register

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type Plugin

type Plugin struct {
	*admission.Handler
}

Plugin implements admission.Interface.

func NewSecurityContextDeny

func NewSecurityContextDeny() *Plugin

NewSecurityContextDeny creates a new instance of the SecurityContextDeny admission controller

func (*Plugin) Validate

func (p *Plugin) Validate(a admission.Attributes) (err error)

Validate will deny any pod that defines SupplementalGroups, SELinuxOptions, RunAsUser or FSGroup