admission

Documentation

Index

• Constants
• func NewExternalIPRanger(reject, admit []*net.IPNet) *externalIPRanger
• func ParseCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)
• type NetworkSlice
  • func (s NetworkSlice) Contains(ip net.IP) bool

Constants

const ExternalIPPluginName = "ExternalIPRanger"

Functions

func NewExternalIPRanger

func NewExternalIPRanger(reject, admit []*net.IPNet) *externalIPRanger

NewConstraint creates a new SCC constraint admission plugin.

func ParseCIDRRules

func ParseCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)

ParseCIDRRules calculates a blacklist and whitelist from a list of string CIDR rules (treating a leading ! as a negation). Returns an error if any rule is invalid.

Types

type NetworkSlice

type NetworkSlice []*net.IPNet

NetworkSlice is a helper for checking whether an IP is contained in a range of networks.

func (NetworkSlice) Contains

func (s NetworkSlice) Contains(ip net.IP) bool