webhook

Documentation

Index

• Variables
• func DelPreValiationCfg20(clt client.Client) error
• func GenerateWebhookCerts(clt client.Client, certDir, webhookServiceNs, webhookServiceName string) ([]byte, error)
• func GetValidatorName(wbhName string) string
• func GetWebHookServiceName(wbhName string) string
• type Certificate
  • func GenerateSelfSignedCACert(cn string) (Certificate, error)
  • func GenerateSignedCert(cn string, alternateDNS []string, ca Certificate) (Certificate, error)
• type ChannelValidator
  • func (v *ChannelValidator) Handle(ctx context.Context, req admission.Request) admission.Response
  • func (v *ChannelValidator) InjectDecoder(d *admission.Decoder) error
• type CleanUpFunc
• type WireUp
  • func NewWireUp(ctx context.Context, mgr manager.Manager, opts ...func(*WireUp)) (*WireUp, error)
  • func (w *WireUp) Attach(clt client.Client) ([]byte, error)
  • func (w *WireUp) WireUpWebhookSupplymentryResource(isExternalAPIServer bool, inClient client.Client, caCert []byte, ...) error

Variables

var ValidateLogic = func(w *WireUp) {
	w.Handler = &ChannelValidator{Client: w.mgr.GetClient(), Logger: w.Logger}
}

ValidateLogic add ChannelValidator to webhook wireup

Functions

func DelPreValiationCfg20

func DelPreValiationCfg20(clt client.Client) error

func GenerateWebhookCerts

func GenerateWebhookCerts(clt client.Client, certDir, webhookServiceNs, webhookServiceName string) ([]byte, error)

GenerateWebhookCerts generate self singed CA and a signed cert pair. The signed pair is stored at the certDir. The CA will respect the inCluster DNS

func GetValidatorName

func GetValidatorName(wbhName string) string

func GetWebHookServiceName

func GetWebHookServiceName(wbhName string) string

Types

type Certificate

type Certificate struct {
	Cert string
	Key  string
}

Certificate defines a typical cert structure

func GenerateSelfSignedCACert

func GenerateSelfSignedCACert(cn string) (Certificate, error)

GenerateSelfSignedCACert generates a self signed CA

func GenerateSignedCert

func GenerateSignedCert(cn string, alternateDNS []string, ca Certificate) (Certificate, error)

GenerateSignedCert generated cert pair which is signed by the self signed CA

type ChannelValidator

type ChannelValidator struct {
	logr.Logger
	client.Client
	// contains filtered or unexported fields
}

func (*ChannelValidator) Handle

func (v *ChannelValidator) Handle(ctx context.Context, req admission.Request) admission.Response

ChannelValidator admits a channel if a specific channel can co-exit in the requested namespace.

func (*ChannelValidator) InjectDecoder

func (v *ChannelValidator) InjectDecoder(d *admission.Decoder) error

InjectDecoder injects the decoder.

type CleanUpFunc

type CleanUpFunc func(client.Client) error

type WireUp

type WireUp struct {
	Server  *webhook.Server
	Handler webhook.AdmissionHandler
	CertDir string
	logr.Logger

	WebhookName string
	WebHookPort int

	WebHookeSvcKey     types.NamespacedName
	WebHookServicePort int

	ValidtorPath string

	DeployLabel        string
	DeploymentSelector map[string]string
	// contains filtered or unexported fields
}

func NewWireUp

func NewWireUp(ctx context.Context, mgr manager.Manager,
	opts ...func(*WireUp)) (*WireUp, error)

func (*WireUp) Attach

func (w *WireUp) Attach(clt client.Client) ([]byte, error)

func (*WireUp) WireUpWebhookSupplymentryResource

func (w *WireUp) WireUpWebhookSupplymentryResource(isExternalAPIServer bool, inClient client.Client,
	caCert []byte, gvk schema.GroupVersionKind, ops []admissionv1.OperationType, cFuncs ...CleanUpFunc) error

assuming we have a service set up for the webhook, and the service is linking to a secret which has the CA