exec

package
v1.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 14, 2022 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// DenyEscalatingExec indicates name of admission plugin.
	DenyEscalatingExec = "DenyEscalatingExec"
	// DenyExecOnPrivileged indicates name of admission plugin.
	// Deprecated, should use DenyEscalatingExec instead.
	DenyExecOnPrivileged = "DenyExecOnPrivileged"
)

Variables

This section is empty.

Functions

func Register

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type DenyExec

type DenyExec struct {
	*admission.Handler
	// contains filtered or unexported fields
}

DenyExec is an implementation of admission.Interface which says no to a pod/exec on a pod using host based configurations.

func NewDenyEscalatingExec

func NewDenyEscalatingExec() *DenyExec

NewDenyEscalatingExec creates a new admission controller that denies an exec operation on a pod using host based configurations.

func NewDenyExecOnPrivileged

func NewDenyExecOnPrivileged() *DenyExec

NewDenyExecOnPrivileged creates a new admission controller that is only checking the privileged option. This is for legacy support of the DenyExecOnPrivileged admission controller. Most of the time NewDenyEscalatingExec should be preferred.

func (*DenyExec) SetExternalKubeClientSet

func (d *DenyExec) SetExternalKubeClientSet(client kubernetes.Interface)

SetExternalKubeClientSet implements the WantsInternalKubeClientSet interface.

func (*DenyExec) Validate

func (d *DenyExec) Validate(a admission.Attributes) (err error)

Validate makes an admission decision based on the request attributes

func (*DenyExec) ValidateInitialization

func (d *DenyExec) ValidateInitialization() error

ValidateInitialization implements the InitializationValidator interface.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL