mutating

Documentation

Index

• Constants
• func NewDispatcher(a authorizer.Authorizer, m *matching.Matcher, tcm patch.TypeConverterManager) generic.Dispatcher[PolicyHook]
• func NewMutatingAdmissionPolicyAccessor(obj *Policy) generic.PolicyAccessor
• func NewMutatingAdmissionPolicyBindingAccessor(obj *PolicyBinding) generic.BindingAccessor
• func Register(plugins *admission.Plugins)
• type MutationEvaluationFunc
• type Mutator
• type Plugin
  • func NewPlugin(_ io.Reader) *Plugin
  • func (a *Plugin) Admit(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error
  • func (a *Plugin) InspectFeatureGates(featureGates featuregate.FeatureGate)
• type Policy
• type PolicyBinding
• type PolicyEvaluator
• type PolicyHook
• type PolicyMutation
• type Variable
  • func (v *Variable) GetExpression() string
  • func (v *Variable) GetName() string
  • func (v *Variable) ReturnTypes() []*celgo.Type

Constants

const (
	// PluginName indicates the name of admission plug-in
	PluginName = "MutatingAdmissionPolicy"
)

Functions

func NewDispatcher

func NewDispatcher(a authorizer.Authorizer, m *matching.Matcher, tcm patch.TypeConverterManager) generic.Dispatcher[PolicyHook]

func NewMutatingAdmissionPolicyAccessor

func NewMutatingAdmissionPolicyAccessor(obj *Policy) generic.PolicyAccessor

func NewMutatingAdmissionPolicyBindingAccessor

func NewMutatingAdmissionPolicyBindingAccessor(obj *PolicyBinding) generic.BindingAccessor

func Register

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type MutationEvaluationFunc

type MutationEvaluationFunc func(
	ctx context.Context,
	matchedResource schema.GroupVersionResource,
	versionedAttr *admission.VersionedAttributes,
	o admission.ObjectInterfaces,
	versionedParams runtime.Object,
	namespace *corev1.Namespace,
	typeConverter managedfields.TypeConverter,
	runtimeCELCostBudget int64,
	authorizer authorizer.Authorizer,
) (runtime.Object, error)

type Mutator

type Mutator struct {
}

type Plugin

type Plugin struct {
	*generic.Plugin[PolicyHook]
}

Plugin is an implementation of admission.Interface.

func NewPlugin

func NewPlugin(_ io.Reader) *Plugin

NewPlugin returns a generic admission webhook plugin.

func (*Plugin) Admit

func (a *Plugin) Admit(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error

Admit makes an admission decision based on the request attributes.

func (*Plugin) InspectFeatureGates

func (a *Plugin) InspectFeatureGates(featureGates featuregate.FeatureGate)

type Policy

type Policy = v1alpha1.MutatingAdmissionPolicy

type PolicyBinding

type PolicyBinding = v1alpha1.MutatingAdmissionPolicyBinding

type PolicyEvaluator

type PolicyEvaluator struct {
	Matcher        matchconditions.Matcher
	Mutators       []patch.Patcher
	CompositionEnv *cel.CompositionEnv
	Error          error
}

type PolicyHook

type PolicyHook = generic.PolicyHook[*Policy, *PolicyBinding, PolicyEvaluator]

type PolicyMutation

type PolicyMutation = v1alpha1.Mutation

type Variable

type Variable struct {
	Name       string
	Expression string
}

Variable is a named expression for composition.

func (*Variable) GetExpression

func (v *Variable) GetExpression() string

func (*Variable) GetName

func (v *Variable) GetName() string

func (*Variable) ReturnTypes

func (v *Variable) ReturnTypes() []*celgo.Type