sccadmission

Documentation

Index

• Constants
• func NewConstraint() *constraint
• func NewInitializer(sccInformer securityv1informer.SecurityContextConstraintsInformer) admission.PluginInitializer
• func NewSCCExecRestrictions() *sccExecRestrictions
• func Register(plugins *admission.Plugins)
• func RegisterSCCExecRestrictions(plugins *admission.Plugins)
• type WantsSecurityInformer

Constants

const PluginName = "security.openshift.io/SecurityContextConstraint"

Functions

func NewConstraint

func NewConstraint() *constraint

NewConstraint creates a new SCC constraint admission plugin.

func NewInitializer

func NewInitializer(sccInformer securityv1informer.SecurityContextConstraintsInformer) admission.PluginInitializer

func NewSCCExecRestrictions

func NewSCCExecRestrictions() *sccExecRestrictions

NewSCCExecRestrictions creates a new admission controller that denies an exec operation on a privileged pod

func Register

func Register(plugins *admission.Plugins)

func RegisterSCCExecRestrictions

func RegisterSCCExecRestrictions(plugins *admission.Plugins)

Types

type WantsSecurityInformer

type WantsSecurityInformer interface {
	SetSecurityInformers(securityv1informer.SecurityContextConstraintsInformer)
	admission.InitializationValidator
}