ctbattest

Documentation

Index

• Constants
• func Register(plugins *admission.Plugins)
• type Plugin
  • func NewPlugin() *Plugin
  • func (p *Plugin) InspectFeatureGates(featureGates featuregate.FeatureGate)
  • func (p *Plugin) SetAuthorizer(authz authorizer.Authorizer)
  • func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error
  • func (p *Plugin) ValidateInitialization() error

Constants

const PluginName = "ClusterTrustBundleAttest"

Functions

func Register

func Register(plugins *admission.Plugins)

Types

type Plugin

type Plugin struct {
	*admission.Handler
	// contains filtered or unexported fields
}

Plugin is the ClusterTrustBundle attest plugin.

In order to create or update a ClusterTrustBundle that sets signerName, you must have the following permission: group=certificates.k8s.io resource=signers resourceName=<the signer name> verb=attest.

func NewPlugin

func NewPlugin() *Plugin

func (*Plugin) InspectFeatureGates

func (p *Plugin) InspectFeatureGates(featureGates featuregate.FeatureGate)

InspectFeatureGates implements WantsFeatures.

func (*Plugin) SetAuthorizer

func (p *Plugin) SetAuthorizer(authz authorizer.Authorizer)

SetAuthorizer sets the plugin's authorizer.

func (*Plugin) Validate

func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

func (*Plugin) ValidateInitialization

func (p *Plugin) ValidateInitialization() error

ValidateInitialization checks that the plugin was initialized correctly.