admission

Documentation

Index

• Variables
• func Combine(service ...core.AdmissionService) core.AdmissionService
• func External(endpoint, secret string, skipVerify bool) core.AdmissionService
• func Membership(service core.OrganizationService, accounts []string) core.AdmissionService
• func Nobot(service core.UserService, age time.Duration) core.AdmissionService
• func Open(disabled bool) core.AdmissionService

Variables

var ErrCannotVerify = errors.New("Cannot verify user authenticity")

ErrCannotVerify is returned when attempting to verify the user is a human being.

var ErrClosed = errors.New("User registration is disabled")

ErrClosed is returned when attempting to create a new user account and admissions are closed.

var ErrMembership = errors.New("User must be a member of an approved organization")

ErrMembership is returned when attempting to create a new user account for a user that is not a member of an approved organization.

Functions

func Combine

func Combine(service ...core.AdmissionService) core.AdmissionService

Combine combines admission services.

func External

func External(endpoint, secret string, skipVerify bool) core.AdmissionService

External returns a new external Admission controller.

func Membership

func Membership(service core.OrganizationService, accounts []string) core.AdmissionService

Membership limits user access by organization membership.

func Nobot

func Nobot(service core.UserService, age time.Duration) core.AdmissionService

Nobot enforces an admission policy that restricts access to users accounts that were recently created and may be bots. The policy expects the source control management system will identify and remove the bot accounts before they would be eligible to use the system.

func Open

func Open(disabled bool) core.AdmissionService

Open enforces an open admission policy by default unless disabled.