pkg/

Package alwayspullimages contains an admission controller that modifies every new Pod to force the image pull policy to Always.

LimitPodHardAntiAffinityTopology admission controller rejects any pod that specifies "hard" (RequiredDuringScheduling) anti-affinity with a TopologyKey other than unversioned.LabelHostname.

Package imagepolicy contains an admission controller that configures a webhook to which policy decisions are delegated.

labels created persistent volumes with zone information as provided by the cloud provider

resourcequota enforces all incoming requests against any applied quota in the namespace context of the request

security contains admission plugins specific to cluster security.

serviceaccount enforces all pods having an associated serviceaccount, and all containers mounting the API token for that serviceaccount at a known location

Package authenticator contains implementations for pkg/auth/authenticator interfaces

Package password contains authenticator.Password implementations

Package keystone provides authentication via keystone.

Package x509 provides a request authenticator that validates and extracts user information from client certificates

oidc implements the authenticator.Token interface using the OpenID Connect protocol.

Package webhook implements the authenticator.Token interface using HTTP webhooks.

Package authorizer contains implementations for pkg/auth/authorizer interfaces

Package rbac implements the authorizer.Authorizer interface using roles base access control.

Package webhook implements the authorizer.Authorizer interface using HTTP webhooks.

Package scheduler contains a generic Scheduler interface and several implementations.

This package is used to register algorithm provider plugins.

This is the default algorithm provider for the scheduler.

Package factory can set up a scheduler.