pkg/

Package alwayspullimages contains an admission controller that modifies every new Pod to force the image pull policy to Always.

LimitPodHardAntiAffinityTopology admission controller rejects any pod that specifies "hard" (RequiredDuringScheduling) anti-affinity with a TopologyKey other than kubeletapis.LabelHostname.

Package eventratelimit contains an admission controller that enforces a rate limit on events

Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.

Package v1alpha1 is the v1alpha1 version of the API.

Package imagepolicy contains an admission controller that configures a webhook to which policy decisions are delegated.

Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.

Package v1alpha1 is the v1alpha1 version of the API.

resourcequota enforces all incoming requests against any applied quota in the namespace context of the request

Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.

Package v1alpha1 is the v1alpha1 version of the API.

Package v1beta1 is the v1beta1 version of the API.

security contains admission plugins specific to cluster security.

serviceaccount enforces all pods having an associated serviceaccount, and all containers mounting the API token for that serviceaccount at a known location

Package label created persistent volumes with zone information as provided by the cloud provider

Package bootstrap provides a token authenticator for TLS bootstrap secrets.

Package authorizer contains implementations for pkg/auth/authorizer interfaces

Package rbac implements the authorizer.Authorizer interface using roles base access control.