inject

Documentation

Index

• func HandleAdmissionRequest(sidecarInjectorConfig SidecarInjectorConfig, req *v1beta1.AdmissionRequest) v1beta1.AdmissionResponse
• func NewAdmissionRequest(reviewRequestBytes []byte) (*v1beta1.AdmissionRequest, error)
• type AuthenticatorSidecarConfig
  • func (authConfig AuthenticatorSidecarConfig) ContainerNameOrDefault() string
• type ContainerVolumeMounts
• type PatchConfig
• type SecretlessSidecarConfig
• type SidecarInjectorConfig
• type WebhookServer
  • func (whsvr *WebhookServer) Serve(w http.ResponseWriter, r *http.Request)
• type WebhookServerParameters

Functions

func HandleAdmissionRequest

func HandleAdmissionRequest(
	sidecarInjectorConfig SidecarInjectorConfig,
	req *v1beta1.AdmissionRequest,
) v1beta1.AdmissionResponse

HandleAdmissionRequest applies the sidecar-injector logic to the AdmissionRequest and returns the results as an AdmissionResponse.

func NewAdmissionRequest

func NewAdmissionRequest(reviewRequestBytes []byte) (*v1beta1.AdmissionRequest, error)

NewAdmissionRequest parses raw bytes to create an AdmissionRequest. AdmissionRequest actually comes wrapped inside the bytes of an AdmissionReview.

Types

type AuthenticatorSidecarConfig

type AuthenticatorSidecarConfig struct {
	// contains filtered or unexported fields
}

func (AuthenticatorSidecarConfig) ContainerNameOrDefault

func (authConfig AuthenticatorSidecarConfig) ContainerNameOrDefault() string

type ContainerVolumeMounts

type ContainerVolumeMounts map[string][]corev1.VolumeMount

type PatchConfig

type PatchConfig struct {
	InitContainers        []corev1.Container    `yaml:"initContainers"`
	Containers            []corev1.Container    `yaml:"containers"`
	Volumes               []corev1.Volume       `yaml:"volumes"`
	ContainerVolumeMounts ContainerVolumeMounts `yaml:"volumeMounts"`
}

type SecretlessSidecarConfig

type SecretlessSidecarConfig struct {
	// contains filtered or unexported fields
}

type SidecarInjectorConfig

type SidecarInjectorConfig struct {
	SecretlessContainerImage    string // Container image for the Secretless sidecar
	AuthenticatorContainerImage string // Container image for the Kubernetes Authenticator

}

SidecarInjectorConfig are configuration values for the sidecar injector logic

type WebhookServer

type WebhookServer struct {
	Server *http.Server
	Params WebhookServerParameters
}

func (*WebhookServer) Serve

func (whsvr *WebhookServer) Serve(w http.ResponseWriter, r *http.Request)

Serve method for webhook Server

type WebhookServerParameters

type WebhookServerParameters struct {
	NoHTTPS                     bool   // Runs an HTTP server when true
	Port                        int    // Webhook Server port
	CertFile                    string // Path to the x509 certificate for https
	KeyFile                     string // Path to the x509 private key matching `CertFile`
	SecretlessContainerImage    string // Container image for the Secretless sidecar
	AuthenticatorContainerImage string // Container image for the Kubernetes Authenticator

}

Webhook Server parameters