limitranger

Documentation

Index

• func PersistentVolumeClaimLimitFunc(limitRange *api.LimitRange, pvc *api.PersistentVolumeClaim) error
• func PodLimitFunc(limitRange *api.LimitRange, pod *api.Pod) error
• func Register(plugins *admission.Plugins)
• type DefaultLimitRangerActions
  • func (d *DefaultLimitRangerActions) Limit(limitRange *api.LimitRange, resourceName string, obj runtime.Object) error
  • func (d *DefaultLimitRangerActions) SupportsAttributes(a admission.Attributes) bool
  • func (d *DefaultLimitRangerActions) SupportsLimit(limitRange *api.LimitRange) bool
• type LimitRanger
  • func NewLimitRanger(actions LimitRangerActions) (*LimitRanger, error)
  • func (l *LimitRanger) Admit(a admission.Attributes) (err error)
  • func (a *LimitRanger) SetInternalKubeClientSet(client internalclientset.Interface)
  • func (l *LimitRanger) SetInternalKubeInformerFactory(f informers.SharedInformerFactory)
  • func (l *LimitRanger) Validate() error
• type LimitRangerActions

Functions

func PersistentVolumeClaimLimitFunc

func PersistentVolumeClaimLimitFunc(limitRange *api.LimitRange, pvc *api.PersistentVolumeClaim) error

PersistentVolumeClaimLimitFunc enforces storage limits for PVCs. Users request storage via pvc.Spec.Resources.Requests. Min/Max is enforced by an admin with LimitRange. Claims will not be modified with default values because storage is a required part of pvc.Spec. All storage enforced values *only* apply to pvc.Spec.Resources.Requests.

func PodLimitFunc

func PodLimitFunc(limitRange *api.LimitRange, pod *api.Pod) error

PodLimitFunc enforces resource requirements enumerated by the pod against the specified LimitRange. The pod may be modified to apply default resource requirements if not specified, and enumerated on the LimitRange

func Register

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type DefaultLimitRangerActions

type DefaultLimitRangerActions struct{}

DefaultLimitRangerActions is the default implementation of LimitRangerActions.

func (*DefaultLimitRangerActions) Limit

func (d *DefaultLimitRangerActions) Limit(limitRange *api.LimitRange, resourceName string, obj runtime.Object) error

Limit enforces resource requirements of incoming resources against enumerated constraints on the LimitRange. It may modify the incoming object to apply default resource requirements if not specified, and enumerated on the LimitRange

func (*DefaultLimitRangerActions) SupportsAttributes

func (d *DefaultLimitRangerActions) SupportsAttributes(a admission.Attributes) bool

SupportsAttributes ignores all calls that do not deal with pod resources or storage requests (PVCs). Also ignores any call that has a subresource defined.

func (*DefaultLimitRangerActions) SupportsLimit

func (d *DefaultLimitRangerActions) SupportsLimit(limitRange *api.LimitRange) bool

SupportsLimit always returns true.

type LimitRanger

type LimitRanger struct {
	*admission.Handler
	// contains filtered or unexported fields
}

LimitRanger enforces usage limits on a per resource basis in the namespace

func NewLimitRanger

func NewLimitRanger(actions LimitRangerActions) (*LimitRanger, error)

NewLimitRanger returns an object that enforces limits based on the supplied limit function

func (*LimitRanger) Admit

func (l *LimitRanger) Admit(a admission.Attributes) (err error)

Admit admits resources into cluster that do not violate any defined LimitRange in the namespace

func (*LimitRanger) SetInternalKubeClientSet

func (a *LimitRanger) SetInternalKubeClientSet(client internalclientset.Interface)

func (*LimitRanger) SetInternalKubeInformerFactory

func (l *LimitRanger) SetInternalKubeInformerFactory(f informers.SharedInformerFactory)

func (*LimitRanger) Validate

func (l *LimitRanger) Validate() error

type LimitRangerActions

type LimitRangerActions interface {
	// Limit is a pluggable function to enforce limits on the object.
	Limit(limitRange *api.LimitRange, kind string, obj runtime.Object) error
	// SupportsAttributes is a pluggable function to allow overridding what resources the limitranger
	// supports.
	SupportsAttributes(attr admission.Attributes) bool
	// SupportsLimit is a pluggable function to allow ignoring limits that should not be applied
	// for any reason.
	SupportsLimit(limitRange *api.LimitRange) bool
}