webhook

Documentation

Index

• Constants
• func LogRequest(ctx context.Context, client client.Client, request admission.Request, ...)
• func Register(mgr ctrl.Manager, vmPool vmpool.VMPool, enablePolicyReports bool, ...) error
• func ReportRequest(ctx context.Context, client client.Client, request admission.Request, ...)
• type Handler
  • func NewHandler(client client.Client, vmPool vmpool.VMPool) Handler
• type Response
• type Webhook
  • func (wh *Webhook) ServeHTTP(w http.ResponseWriter, r *http.Request)

Constants

const (
	Source                  = "JsPolicy"
	PolicyReportPrefix      = "js-policy-report-ns-"
	ClusterPolicyReportName = "js-cluster-policy-report"

	CategoryAnnotation = "policy.jspolicy.com/category"
	SeverityAnnotation = "policy.jspolicy.com/severity"
)

const DefaultAuditLogSize = 20

Functions

func LogRequest

func LogRequest(ctx context.Context, client client.Client, request admission.Request, response admission.Response, jsPolicy *policyv1beta1.JsPolicy, scheme *runtime.Scheme, retryCounter int)

func Register

func Register(mgr ctrl.Manager, vmPool vmpool.VMPool, enablePolicyReports bool, policyReportMaxEvents int) error

func ReportRequest

func ReportRequest(
	ctx context.Context,
	client client.Client,
	request admission.Request,
	response admission.Response,
	jsPolicy *policyv1beta1.JsPolicy,
	scheme *runtime.Scheme,
	maxEvents int,
	retryCounter int,
)

Types

type Handler

type Handler interface {
	Handle(context.Context, admission.Request, *policyv1beta1.JsPolicy) (admission.Response, *Response)
}

func NewHandler

func NewHandler(client client.Client, vmPool vmpool.VMPool) Handler

type Response

type Response struct {
	Deny     bool                   `json:"deny,omitempty"`
	Reason   string                 `json:"reason,omitempty"`
	Message  string                 `json:"message,omitempty"`
	Code     int                    `json:"code,omitempty"`
	Patched  map[string]interface{} `json:"patched,omitempty"`
	Warnings []string               `json:"warnings,omitempty"`

	// this is only used in background policies
	Reschedule bool `json:"reschedule,omitempty"`
}

type Webhook

type Webhook struct {
	Client  client.Client
	Handler Handler
	Scheme  *runtime.Scheme
	// contains filtered or unexported fields
}

func (*Webhook) ServeHTTP

func (wh *Webhook) ServeHTTP(w http.ResponseWriter, r *http.Request)