Documentation
¶
Index ¶
- Constants
- func CreateClientConfig(kubeconfig string, qps float64, burst int) (*rest.Config, error)
- func CreateClientConfigWithContext(kubeconfig string, context string) (*rest.Config, error)
- func KyvernoConfigMapName() string
- func KyvernoDeploymentName() string
- func KyvernoDryRunNamespace() string
- func KyvernoNamespace() string
- func KyvernoPodName() string
- func KyvernoServiceAccountName() string
- func KyvernoServiceName() string
- func NewDefaultConfiguration() *configuration
- func NewDefaultMetricsConfiguration() *metricsConfig
- type Configuration
- type MetricsConfiguration
- type WebhookConfig
Constants ¶
View Source
const ( // PolicyValidatingWebhookConfigurationName default policy validating webhook configuration name PolicyValidatingWebhookConfigurationName = "kyverno-policy-validating-webhook-cfg" // ValidatingWebhookConfigurationName ... ValidatingWebhookConfigurationName = "kyverno-resource-validating-webhook-cfg" // ExceptionValidatingWebhookConfigurationName ... ExceptionValidatingWebhookConfigurationName = "kyverno-exception-validating-webhook-cfg" // CleanupValidatingWebhookConfigurationName ... CleanupValidatingWebhookConfigurationName = "kyverno-cleanup-validating-webhook-cfg" // PolicyMutatingWebhookConfigurationName default policy mutating webhook configuration name PolicyMutatingWebhookConfigurationName = "kyverno-policy-mutating-webhook-cfg" // MutatingWebhookConfigurationName default resource mutating webhook configuration name MutatingWebhookConfigurationName = "kyverno-resource-mutating-webhook-cfg" // VerifyMutatingWebhookConfigurationName default verify mutating webhook configuration name VerifyMutatingWebhookConfigurationName = "kyverno-verify-mutating-webhook-cfg" )
webhook configuration names
View Source
const ( // PolicyValidatingWebhookName default policy validating webhook name PolicyValidatingWebhookName = "validate-policy.kyverno.svc" // ValidatingWebhookName ... ValidatingWebhookName = "validate.kyverno.svc" // PolicyMutatingWebhookName default policy mutating webhook name PolicyMutatingWebhookName = "mutate-policy.kyverno.svc" // MutatingWebhookName default resource mutating webhook name MutatingWebhookName = "mutate.kyverno.svc" // VerifyMutatingWebhookName default verify mutating webhook name VerifyMutatingWebhookName = "monitor-webhooks.kyverno.svc" )
webhook names
View Source
const ( // PolicyValidatingWebhookServicePath is the path for policy validation webhook(used to validate policy resource) PolicyValidatingWebhookServicePath = "/policyvalidate" // ValidatingWebhookServicePath is the path for validation webhook ValidatingWebhookServicePath = "/validate" // ExceptionValidatingWebhookServicePath is the path for policy exception validation webhook(used to validate policy exception resource) ExceptionValidatingWebhookServicePath = "/exceptionvalidate" // CleanupValidatingWebhookServicePath is the path for cleanup policy validation webhook(used to validate cleanup policy resource) CleanupValidatingWebhookServicePath = "/validate" // PolicyMutatingWebhookServicePath is the path for policy mutation webhook(used to default) PolicyMutatingWebhookServicePath = "/policymutate" // MutatingWebhookServicePath is the path for mutation webhook MutatingWebhookServicePath = "/mutate" // VerifyMutatingWebhookServicePath is the path for verify webhook(used to veryfing if admission control is enabled and active) VerifyMutatingWebhookServicePath = "/verifymutate" // LivenessServicePath is the path for check liveness health LivenessServicePath = "/health/liveness" // ReadinessServicePath is the path for check readness health ReadinessServicePath = "/health/readiness" // MetricsPath is the path for exposing metrics MetricsPath = "/metrics" )
paths
View Source
const ( // Due to kubernetes issue, we must use next literal constants instead of deployment TypeMeta fields // Issue: https://github.com/kubernetes/kubernetes/pull/63972 // When the issue is closed, we should use TypeMeta struct instead of this constants // ClusterRoleAPIVersion define the default clusterrole resource apiVersion ClusterRoleAPIVersion = "rbac.authorization.k8s.io/v1" // ClusterRoleKind define the default clusterrole resource kind ClusterRoleKind = "ClusterRole" )
Variables ¶
This section is empty.
Functions ¶
func CreateClientConfig ¶ added in v1.1.0
CreateClientConfig creates client config and applies rate limit QPS and burst
func CreateClientConfigWithContext ¶ added in v1.8.1
CreateClientConfigWithContext creates client config from custom kubeconfig file and context Used for cli commands
func KyvernoConfigMapName ¶ added in v1.7.0
func KyvernoConfigMapName() string
func KyvernoDeploymentName ¶ added in v1.3.0
func KyvernoDeploymentName() string
func KyvernoDryRunNamespace ¶ added in v1.8.2
func KyvernoDryRunNamespace() string
func KyvernoNamespace ¶ added in v1.3.0
func KyvernoNamespace() string
func KyvernoPodName ¶ added in v1.7.0
func KyvernoPodName() string
func KyvernoServiceAccountName ¶ added in v1.8.0
func KyvernoServiceAccountName() string
func KyvernoServiceName ¶ added in v1.3.0
func KyvernoServiceName() string
func NewDefaultConfiguration ¶ added in v1.8.1
func NewDefaultConfiguration() *configuration
NewDefaultConfiguration ...
func NewDefaultMetricsConfiguration ¶ added in v1.9.0
func NewDefaultMetricsConfiguration() *metricsConfig
NewDefaultMetricsConfiguration ...
Types ¶
type Configuration ¶ added in v1.7.0
type Configuration interface { // ToFilter checks if the given resource is set to be filtered in the configuration ToFilter(kind, namespace, name string) bool // GetExcludeGroupRole return exclude roles GetExcludeGroupRole() []string // GetExcludeUsername return exclude username GetExcludeUsername() []string // GetGenerateSuccessEvents return if should generate success events GetGenerateSuccessEvents() bool // FilterNamespaces filters exclude namespace FilterNamespaces(namespaces []string) []string // GetWebhooks returns the webhook configs GetWebhooks() []WebhookConfig // GetWebhookAnnotations returns annotations to set on webhook configs GetWebhookAnnotations() map[string]string // Load loads configuration from a configmap Load(cm *corev1.ConfigMap) }
Configuration to be used by consumer to check filters
func NewConfiguration ¶ added in v1.7.0
func NewConfiguration(client kubernetes.Interface) (Configuration, error)
NewConfiguration ...
type MetricsConfiguration ¶ added in v1.9.0
type MetricsConfiguration interface { // GetExcludeNamespaces returns the namespaces to ignore for metrics exposure GetExcludeNamespaces() []string // GetIncludeNamespaces returns the namespaces to specifically consider for metrics exposure GetIncludeNamespaces() []string // GetMetricsRefreshInterval returns the refresh interval for the metrics GetMetricsRefreshInterval() time.Duration // CheckNamespace returns `true` if the namespace has to be considered CheckNamespace(string) bool }
MetricsConfig stores the config for metrics
func NewMetricsConfiguration ¶ added in v1.9.0
func NewMetricsConfiguration(client kubernetes.Interface) (MetricsConfiguration, error)
NewMetricsConfiguration ...
type WebhookConfig ¶ added in v1.4.0
type WebhookConfig struct { NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty"` ObjectSelector *metav1.LabelSelector `json:"objectSelector,omitempty"` }
Click to show internal directories.
Click to hide internal directories.