admissionwebhook

May 20, 2022

Changes in this version

+ var ErrAPIKeyEnvNotSet = fmt.Errorf("variable K8S_WEBHOOK_API_KEY not set in terrascan server environment")

+ var ErrAPIKeyMissing = fmt.Errorf("apiKey is missing in validating admission webhook url")

+ var ErrEmptyAdmissionReview = fmt.Errorf("empty admission review request")

+ var ErrUnauthorized = fmt.Errorf("invalid API key in validating admission webhook url")

+ type AdmissionWebhook interface

+ Authorize func(apiKey string) error

+ DecodeAdmissionReviewRequest func(payload []byte) (admissionv1.AdmissionReview, error)

+ ProcessWebhook func(review admissionv1.AdmissionReview, serverURL string) (*admissionv1.AdmissionReview, error)

+ func NewValidatingWebhook(body []byte, ...) AdmissionWebhook

+ type ValidatingWebhook struct

+ func (w ValidatingWebhook) Authorize(apiKey string) error

+ func (w ValidatingWebhook) DecodeAdmissionReviewRequest(requestBody []byte) (admissionv1.AdmissionReview, error)

+ func (w ValidatingWebhook) ProcessWebhook(review admissionv1.AdmissionReview, serverURL string) (*admissionv1.AdmissionReview, error)

+ type WebhookDenyRuleMatcher struct

+ func (g *WebhookDenyRuleMatcher) Match(violation results.Violation, denyRules config.K8sAdmissionControl) bool