webhook

Documentation

Index

• func GenerateWebhookCerts(certDir, webhookServiceNs, webhookServiceName string) ([]byte, error)
• func GetValidatorName(wbhName string) string
• func GetWebHookServiceName(wbhName string) string
• type Certificate
  • func GenerateSelfSignedCACert(cn string) (Certificate, error)
  • func GenerateSignedCert(cn string, alternateDNS []string, ca Certificate) (Certificate, error)
• type WireUp
  • func NewWireUp(mgr manager.Manager, stop <-chan struct{}, opts ...func(*WireUp)) (*WireUp, error)
  • func (w *WireUp) Attach() ([]byte, error)
  • func (w *WireUp) WireUpWebhookSupplymentryResource(caCert []byte, gvk schema.GroupVersionKind, ops []admissionv1.OperationType)

Functions

func GenerateWebhookCerts

func GenerateWebhookCerts(certDir, webhookServiceNs, webhookServiceName string) ([]byte, error)

GenerateWebhookCerts generate self singed CA and a signed cert pair. The signed pair is stored at the certDir. The CA will respect the inCluster DNS

func GetValidatorName

func GetValidatorName(wbhName string) string

func GetWebHookServiceName

func GetWebHookServiceName(wbhName string) string

Types

type Certificate

type Certificate struct {
	Cert string
	Key  string
}

Certificate defines a typical cert structure

func GenerateSelfSignedCACert

func GenerateSelfSignedCACert(cn string) (Certificate, error)

GenerateSelfSignedCACert generates a self signed CA

func GenerateSignedCert

func GenerateSignedCert(cn string, alternateDNS []string, ca Certificate) (Certificate, error)

GenerateSignedCert generated cert pair which is signed by the self signed CA

type WireUp

type WireUp struct {
	Server  *webhook.Server
	Handler webhook.AdmissionHandler
	CertDir string
	logr.Logger

	WebhookName string
	WebHookPort int

	WebHookeSvcKey     types.NamespacedName
	WebHookServicePort int

	ValidtorPath string

	DeployLabel        string
	DeploymentSelector map[string]string
	// contains filtered or unexported fields
}

func NewWireUp

func NewWireUp(mgr manager.Manager, stop <-chan struct{},
	opts ...func(*WireUp)) (*WireUp, error)

func (*WireUp) Attach

func (w *WireUp) Attach() ([]byte, error)

func (*WireUp) WireUpWebhookSupplymentryResource

func (w *WireUp) WireUpWebhookSupplymentryResource(caCert []byte, gvk schema.GroupVersionKind, ops []admissionv1.OperationType)

assuming we have a service set up for the webhook, and the service is linking to a secret which has the CA