subjectrestriction

Documentation

Index

• Constants
• func Register(plugins *admission.Plugins)
• type Plugin
  • func NewPlugin() *Plugin
  • func (p *Plugin) Validate(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error
  • func (p *Plugin) ValidateInitialization() error

Constants

const PluginName = "CertificateSubjectRestriction"

PluginName is a string with the name of the plugin

Functions

func Register

func Register(plugins *admission.Plugins)

Register registers the plugin

Types

type Plugin

type Plugin struct {
	*admission.Handler
}

Plugin holds state for and implements the admission plugin.

func NewPlugin

func NewPlugin() *Plugin

NewPlugin constructs a new instance of the CertificateSubjectRestrictions admission interface.

func (*Plugin) Validate

func (p *Plugin) Validate(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Validate ensures that if the signerName on a CSR is set to `kubernetes.io/kube-apiserver-client`, that its organization (group) attribute is not set to `system:masters`.

func (*Plugin) ValidateInitialization

func (p *Plugin) ValidateInitialization() error

ValidateInitialization always returns nil.