resource

Documentation

Index

• func NewFakeHandlers(ctx context.Context, policyCache policycache.Cache) webhooks.Handlers
• func NewHandlers(client dclient.Interface, kyvernoClient versioned.Interface, ...) webhooks.Handlers
• type AuditHandler
  • func NewValidateAuditHandler(pCache policycache.Cache, eventGen event.Interface, ...) AuditHandler

Functions

func NewFakeHandlers

func NewFakeHandlers(ctx context.Context, policyCache policycache.Cache) webhooks.Handlers

func NewHandlers

func NewHandlers(
	client dclient.Interface,
	kyvernoClient versioned.Interface,
	configuration config.Configuration,
	metricsConfig *metrics.MetricsConfig,
	pCache policycache.Cache,
	nsLister corev1listers.NamespaceLister,
	rbLister rbacv1listers.RoleBindingLister,
	crbLister rbacv1listers.ClusterRoleBindingLister,
	urLister kyvernov1beta1listers.UpdateRequestNamespaceLister,
	prGenerator policyreport.GeneratorInterface,
	urGenerator webhookgenerate.Generator,
	eventGen event.Interface,
	auditHandler AuditHandler,
	openAPIController openapi.ValidateInterface,
) webhooks.Handlers

Types

type AuditHandler

type AuditHandler interface {
	Add(request *admissionv1.AdmissionRequest)
	Run(workers int, stopCh <-chan struct{})
}

AuditHandler applies validate audit policies to the admission request the handler adds the request to the work queue and returns immediately the request is processed in background, with the exact same logic when process the admission request in the webhook

func NewValidateAuditHandler

func NewValidateAuditHandler(pCache policycache.Cache,
	eventGen event.Interface,
	prGenerator policyreport.GeneratorInterface,
	rbInformer rbacv1informers.RoleBindingInformer,
	crbInformer rbacv1informers.ClusterRoleBindingInformer,
	namespaces corev1informers.NamespaceInformer,
	log logr.Logger,
	dynamicConfig config.Configuration,
	client dclient.Interface,
	metricsConfig *metrics.MetricsConfig,
) AuditHandler

NewValidateAuditHandler returns a new instance of audit policy handler