Documentation
¶
Index ¶
- Constants
- func NewExternalIPRanger(reject, admit []*net.IPNet, allowIngressIP bool) *externalIPRanger
- func NewRestrictedEndpointsAdmission(restrictedNetworks []*net.IPNet) *restrictedEndpointsAdmission
- func ParseRejectAdmitCIDRRules(rules []string) (reject, admit []*net.IPNet, err error)
- func ParseSimpleCIDRRules(rules []string) (networks []*net.IPNet, err error)
- func RegisterExternalIP(plugins *admission.Plugins)
- func RegisterRestrictedEndpoints(plugins *admission.Plugins)
- type NetworkSlice
Constants ¶
View Source
const ExternalIPPluginName = "ExternalIPRanger"
View Source
const RestrictedEndpointsPluginName = "openshift.io/RestrictedEndpointsAdmission"
Variables ¶
This section is empty.
Functions ¶
func NewExternalIPRanger ¶
NewConstraint creates a new SCC constraint admission plugin.
func NewRestrictedEndpointsAdmission ¶
NewRestrictedEndpointsAdmission creates a new endpoints admission plugin.
func ParseRejectAdmitCIDRRules ¶
ParseRejectAdmitCIDRRules calculates a blacklist and whitelist from a list of string CIDR rules (treating a leading ! as a negation). Returns an error if any rule is invalid.
func ParseSimpleCIDRRules ¶
ParseSimpleCIDRRules parses a list of CIDR strings
func RegisterExternalIP ¶ added in v3.7.0
func RegisterRestrictedEndpoints ¶ added in v3.7.0
Types ¶
type NetworkSlice ¶
NetworkSlice is a helper for checking whether an IP is contained in a range of networks.
Click to show internal directories.
Click to hide internal directories.