injector

Documentation

Overview

Package injector handles mutating webhook operations.

Index

• Constants
• func Admit(writer http.ResponseWriter, req *http.Request)
• func CreateConfiguration(clientset kubeclientset.Interface, selector *metav1.LabelSelector) error
• func GetTLSConfig() *tls.Config

Constants

const (
	// Name is the name of the admission webhook service. The admission
	// webhook must be exposed in the following service; this is mainly for
	// the server certificate.
	Name = "gvisor-injection-admission-webhook"
)

Functions

func Admit

func Admit(writer http.ResponseWriter, req *http.Request)

Admit performs admission checks and mutations on Pods.

func CreateConfiguration

func CreateConfiguration(clientset kubeclientset.Interface, selector *metav1.LabelSelector) error

CreateConfiguration creates MutatingWebhookConfiguration and registers the webhook admission controller with the kube-apiserver. The webhook will only take effect on pods in the namespaces selected by `podNsSelector`. If `podNsSelector` is empty, the webhook will take effect on all pods.

func GetTLSConfig

func GetTLSConfig() *tls.Config

GetTLSConfig retrieves the CA cert that signed the cert used by the webhook.