admission

package

v5.0.0-preview.1+incom... Latest Latest Go to latest Published: Jan 13, 2022 License: Apache-2.0 Imports: 24 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

View Source

const (
	UriAdmCtrlPrefix   = "/v1"
	UriAdmCtrlNvStatus = "nvstatus"
)

View Source

const (
	K8sResOpCreate = "create"
	K8sResOpUpdate = "update"
	K8sResOpDelete = "delete"
)

View Source

const (
	TestSucceeded = iota
	TestFailedAtRead
	TestFailedAtWrite
	TestFailed
	TestAborted
)

View Source

const (
	AdmRuleCatK8s = "Kubernetes"
)

View Source

const (
	//NvAdmMutateType   = "mutate" // for Kubernetes
	NvAdmValidateType = "validate" // for Kubernetes
)

This section is empty.

func ConfigK8sAdmissionControl(k8sResInfo ValidatingWebhookConfigInfo, ctrlState *share.CLUSAdmCtrlState) (bool, error)

func EchoAdmWebhookConnection(tagExpected, svcname string)

func GetAdmissionCtrlTypes(platform string) []string

func GetSvcLabelKeysForTest(svcname string) (string, string)

func InitK8sNsSelectorInfo(allowedNS, allowedNsWild utils.Set, selectorValue string, admCtrlEnabled bool)

func IsNsSelectorSupported() bool

func ResetCABundle(svcName string, caBundle []byte) bool

func SetCABundle(svcName string, caBundle []byte)

func TestAdmWebhookConnection(svcname string) (int, error)

func UnregK8sAdmissionControl(admType, nvAdmName string) error

func UpdateAllowedK8sNs(isLead, admCtrlEnabled bool, newAllowedNS, newAllowedNsWild utils.Set)

func ValidateK8sSetting(k8sResInfo ValidatingWebhookConfigInfo) bool

func VerifyAdmClusterRole() (bool, error)

https://kubernetes.io/docs/reference/using-api/deprecation-guide/ The rbac.authorization.k8s.io/v1beta1 API version of ClusterRole, ClusterRoleBinding, Role, and RoleBinding is no longer served as of v1.22.

func VerifyAdmClusterRoleBinding() (bool, error)

func VerifyK8sNs(admCtrlEnabled bool, nsName string, nsLabels map[string]string)

type ClientConfig struct {
	ClientMode  string // "service" or "url"
	ServiceName string
	Path        string // uri
	Port        int32
}

type ValidateWebhookSvcInfo struct {
	Status      int
	SvcNodePort int32
	SvcType     string
	LabelTag    string
	LabelEcho   string
}

func GetValidateWebhookSvcInfo(svcname string) (error, *ValidateWebhookSvcInfo)

type ValidatingWebhookConfigInfo struct {
	Name         string
	WebhooksInfo []*WebhookInfo
}

type WebhookInfo struct {
	Name           string
	ClientConfig   ClientConfig
	FailurePolicy  string
	TimeoutSeconds int32
}

type WebhookSvcLabelKey struct {
	TagKey  string
	EchoKey string
}

Path	Synopsis
admission