scdeny

Documentation

Index

• Constants
• func Register(plugins *admission.Plugins)
• type Plugin
  • func NewSecurityContextDeny() *Plugin
  • func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error)

Constants

const PluginName = "SecurityContextDeny"

PluginName indicates name of admission plugin.

Functions

func Register

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type Plugin

type Plugin struct {
	*admission.Handler
}

Plugin implements admission.Interface.

func NewSecurityContextDeny

func NewSecurityContextDeny() *Plugin

NewSecurityContextDeny creates a new instance of the SecurityContextDeny admission controller

func (*Plugin) Validate

func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error)

Validate will deny any pod that defines SupplementalGroups, SELinuxOptions, RunAsUser or FSGroup