admission

Documentation

Overview

+k8s:deepcopy-gen=package +groupName=admission.k8s.io

Index

• Constants
• Variables
• func Kind(kind string) schema.GroupKind
• func Resource(resource string) schema.GroupResource
• type AdmissionReview
  • func (in *AdmissionReview) DeepCopy() *AdmissionReview
  • func (in *AdmissionReview) DeepCopyInto(out *AdmissionReview)
  • func (in *AdmissionReview) DeepCopyObject() runtime.Object
• type AdmissionReviewSpec
  • func (in *AdmissionReviewSpec) DeepCopy() *AdmissionReviewSpec
  • func (in *AdmissionReviewSpec) DeepCopyInto(out *AdmissionReviewSpec)
• type AdmissionReviewStatus
  • func (in *AdmissionReviewStatus) DeepCopy() *AdmissionReviewStatus
  • func (in *AdmissionReviewStatus) DeepCopyInto(out *AdmissionReviewStatus)
• type Operation

Constants

const GroupName = "admission.k8s.io"

GroupName is the group name use in this package

Variables

var (
	// SchemeBuilder the schema builder
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
	// AddToScheme handler to add items to the schema
	AddToScheme = SchemeBuilder.AddToScheme
)

var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: runtime.APIVersionInternal}

SchemeGroupVersion is group version used to register these objects

Functions

func Kind

func Kind(kind string) schema.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind

func Resource

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type AdmissionReview

type AdmissionReview struct {
	metav1.TypeMeta

	// Spec describes the attributes for the admission request.
	// Since this admission controller is non-mutating the webhook should avoid setting this in its response to avoid the
	// cost of deserializing it.
	Spec AdmissionReviewSpec
	// Status is filled in by the webhook and indicates whether the admission request should be permitted.
	Status AdmissionReviewStatus
}

AdmissionReview describes an admission request.

func (*AdmissionReview) DeepCopy

func (in *AdmissionReview) DeepCopy() *AdmissionReview

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AdmissionReview.

func (*AdmissionReview) DeepCopyInto

func (in *AdmissionReview) DeepCopyInto(out *AdmissionReview)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AdmissionReview) DeepCopyObject

func (in *AdmissionReview) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type AdmissionReviewSpec

type AdmissionReviewSpec struct {
	// Kind is the type of object being manipulated.  For example: Pod
	Kind metav1.GroupVersionKind
	// Name is the name of the object as presented in the request.  On a CREATE operation, the client may omit name and
	// rely on the server to generate the name.  If that is the case, this method will return the empty string.
	Name string
	// Namespace is the namespace associated with the request (if any).
	Namespace string
	// Object is the object from the incoming request prior to default values being applied
	Object runtime.Object
	// OldObject is the existing object. Only populated for UPDATE requests.
	OldObject runtime.Object
	// Operation is the operation being performed
	Operation Operation
	// Resource is the name of the resource being requested.  This is not the kind.  For example: pods
	Resource metav1.GroupVersionResource
	// SubResource is the name of the subresource being requested.  This is a different resource, scoped to the parent
	// resource, but it may have a different kind. For instance, /pods has the resource "pods" and the kind "Pod", while
	// /pods/foo/status has the resource "pods", the sub resource "status", and the kind "Pod" (because status operates on
	// pods). The binding resource for a pod though may be /pods/foo/binding, which has resource "pods", subresource
	// "binding", and kind "Binding".
	SubResource string
	// UserInfo is information about the requesting user
	UserInfo authentication.UserInfo
}

AdmissionReviewSpec describes the admission.Attributes for the admission request.

func (*AdmissionReviewSpec) DeepCopy

func (in *AdmissionReviewSpec) DeepCopy() *AdmissionReviewSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AdmissionReviewSpec.

func (*AdmissionReviewSpec) DeepCopyInto

func (in *AdmissionReviewSpec) DeepCopyInto(out *AdmissionReviewSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AdmissionReviewStatus

type AdmissionReviewStatus struct {
	// Allowed indicates whether or not the admission request was permitted.
	Allowed bool
	// Result contains extra details into why an admission request was denied.
	// This field IS NOT consulted in any way if "Allowed" is "true".
	// +optional
	Result *metav1.Status
}

AdmissionReviewStatus describes the status of the admission request.

func (*AdmissionReviewStatus) DeepCopy

func (in *AdmissionReviewStatus) DeepCopy() *AdmissionReviewStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AdmissionReviewStatus.

func (*AdmissionReviewStatus) DeepCopyInto

func (in *AdmissionReviewStatus) DeepCopyInto(out *AdmissionReviewStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Operation

type Operation string

Operation is the type of resource operation being checked for admission control

const (
	Create  Operation = "CREATE"
	Update  Operation = "UPDATE"
	Delete  Operation = "DELETE"
	Connect Operation = "CONNECT"
)

Operation constants