kubeconfigsecret

Documentation

Index

• Constants
• func New(logger logr.Logger) *handler

Constants

const (
	// HandlerName is the name of this admission webhook handler.
	HandlerName = "kubeconfig_validator"
	// WebhookPath is the HTTP handler path for this admission webhook handler.
	WebhookPath = "/webhooks/validate-kubeconfig-secrets"
)

Functions

func New

func New(logger logr.Logger) *handler

New creates a new webhook handler validating CREATE and UPDATE requests on secrets. It checks, if the secrets contains a kubeconfig and denies kubeconfigs with invalid fields (e.g. tokenFile or exec).