admission

Documentation

Index

• Variables
• type PodEnforcementHandler
  • func NewPodEnforcementHandler(opts ...PodEnforcementHandlerOption) *PodEnforcementHandler
  • func (peh *PodEnforcementHandler) Handle(ctx context.Context, req admission.Request) admission.Response
  • func (peh *PodEnforcementHandler) InjectDecoder(d *admission.Decoder) error
• type PodEnforcementHandlerOption
  • func PodEnforcementHandlerWithRuntimeClassName(runtimeClassName string) PodEnforcementHandlerOption
  • func PodEnforcementHandlerWithStandaloneMode(standalone bool) PodEnforcementHandlerOption

Variables

var (
	PodNodeSelector = map[string]string{
		"nebula.puppet.com/scheduling.customer-ready": "true",
	}
	PodTolerations = []corev1.Toleration{
		{
			Key:    "nebula.puppet.com/scheduling.customer-workload",
			Value:  "true",
			Effect: corev1.TaintEffectNoSchedule,
		},
		{
			Key:    "sandbox.gke.io/runtime",
			Value:  "gvisor",
			Effect: corev1.TaintEffectNoSchedule,
		},
	}
	PodDNSPolicy = corev1.DNSNone
	PodDNSConfig = &corev1.PodDNSConfig{
		Nameservers: []string{
			"1.1.1.1",
			"1.0.0.1",
			"8.8.8.8",
		},
	}
)

Types

type PodEnforcementHandler

type PodEnforcementHandler struct {
	// contains filtered or unexported fields
}

func NewPodEnforcementHandler

func NewPodEnforcementHandler(opts ...PodEnforcementHandlerOption) *PodEnforcementHandler

func (*PodEnforcementHandler) Handle

func (peh *PodEnforcementHandler) Handle(ctx context.Context, req admission.Request) admission.Response

func (*PodEnforcementHandler) InjectDecoder

func (peh *PodEnforcementHandler) InjectDecoder(d *admission.Decoder) error

type PodEnforcementHandlerOption

type PodEnforcementHandlerOption func(peh *PodEnforcementHandler)

func PodEnforcementHandlerWithRuntimeClassName

func PodEnforcementHandlerWithRuntimeClassName(runtimeClassName string) PodEnforcementHandlerOption

func PodEnforcementHandlerWithStandaloneMode

func PodEnforcementHandlerWithStandaloneMode(standalone bool) PodEnforcementHandlerOption