validation

Documentation

Index

• Variables
• func ValidateMCIdentity(ctx context.Context, client client.Client, req admission.Request, ...) admission.Response
• func ValidateMemberClusterUpdate(currentObj, oldObj client.Object, req admission.Request, ...) admission.Response
• func ValidateUserForFleetCRD(req admission.Request, whiteListedUsers []string, group string) admission.Response
• func ValidateUserForResource(req admission.Request, whiteListedUsers []string) admission.Response

Variables

var (
	CRDGVK          = metav1.GroupVersionKind{Group: v1.SchemeGroupVersion.Group, Version: v1.SchemeGroupVersion.Version, Kind: "CustomResourceDefinition"}
	V1Alpha1MCGVK   = metav1.GroupVersionKind{Group: fleetv1alpha1.GroupVersion.Group, Version: fleetv1alpha1.GroupVersion.Version, Kind: "MemberCluster"}
	V1Alpha1IMCGVK  = metav1.GroupVersionKind{Group: fleetv1alpha1.GroupVersion.Group, Version: fleetv1alpha1.GroupVersion.Version, Kind: "InternalMemberCluster"}
	V1Alpha1WorkGVK = metav1.GroupVersionKind{Group: workv1alpha1.GroupVersion.Group, Version: workv1alpha1.GroupVersion.Version, Kind: "Work"}
	MCGVK           = metav1.GroupVersionKind{Group: clusterv1beta1.GroupVersion.Group, Version: clusterv1beta1.GroupVersion.Version, Kind: "MemberCluster"}
	IMCGVK          = metav1.GroupVersionKind{Group: clusterv1beta1.GroupVersion.Group, Version: clusterv1beta1.GroupVersion.Version, Kind: "InternalMemberCluster"}
	WorkGVK         = metav1.GroupVersionKind{Group: placementv1beta1.GroupVersion.Group, Version: placementv1beta1.GroupVersion.Version, Kind: "Work"}
	NamespaceGVK    = metav1.GroupVersionKind{Group: corev1.SchemeGroupVersion.Group, Version: corev1.SchemeGroupVersion.Version, Kind: "Namespace"}
	EventGVK        = metav1.GroupVersionKind{Group: corev1.SchemeGroupVersion.Group, Version: corev1.SchemeGroupVersion.Version, Kind: "Event"}
)

Functions

func ValidateMCIdentity

func ValidateMCIdentity(ctx context.Context, client client.Client, req admission.Request, mcName string) admission.Response

ValidateMCIdentity returns admission allowed/denied based on the member cluster's identity.

func ValidateMemberClusterUpdate

func ValidateMemberClusterUpdate(currentObj, oldObj client.Object, req admission.Request, whiteListedUsers []string) admission.Response

ValidateMemberClusterUpdate checks to see if user had updated the member cluster resource and allows/denies the request.

func ValidateUserForFleetCRD

func ValidateUserForFleetCRD(req admission.Request, whiteListedUsers []string, group string) admission.Response

ValidateUserForFleetCRD checks to see if user is not allowed to modify fleet CRDs.

func ValidateUserForResource

func ValidateUserForResource(req admission.Request, whiteListedUsers []string) admission.Response

ValidateUserForResource checks to see if user is allowed to modify argued resource modified by request.