admission

type AdmissionHandlerType ¶

type AdmissionHandlerType func(wh webhook.Interface) (Interface, error)

type Decoder ¶

type Decoder struct {
	// contains filtered or unexported fields
}

Decoder knows how to decode the contents of an admission request into a concrete object.

func NewDecoder(scheme *runtime.Scheme) *Decoder

func (d *Decoder) Decode(req Request, into runtime.Object) error

func (d *Decoder) DecodeRaw(rawObj runtime.RawExtension, into runtime.Object) error

type DefaultHandler ¶

type DefaultHandler struct {
}

DefaultHandler can be used for a default implementation of all interface methods

func (this *DefaultHandler) Handle(logger.LogContext, Request) Response

type Definition ¶

type Definition interface {
	GetKind() webhook.WebhookKind
	GetHTTPHandler(wh webhook.Interface) (http.Handler, error)

	GetNamespaces() *meta.LabelSelector
	GetOperations() []adminreg.OperationType
	GetFailurePolicy() adminreg.FailurePolicyType
}

type HTTPHandler ¶

type HTTPHandler struct {
	logger.LogContext
	// contains filtered or unexported fields
}

HTTPHandler represents each individual webhook.

func (this *HTTPHandler) ServeHTTP(w http.ResponseWriter, r *http.Request)

func (this *HTTPHandler) Webhook() Interface

type Interface ¶

type Interface interface {
	Handle(logger.LogContext, Request) Response
}

Interface can handle an AdmissionRequest.

type MutatingWebhookDeclaration ¶

type MutatingWebhookDeclaration struct {
	adminreg.MutatingWebhook
}

func (this *MutatingWebhookDeclaration) DeepCopy() *adminreg.MutatingWebhook

func (this *MutatingWebhookDeclaration) Kind() webhook.WebhookKind

type Request ¶

type Request struct {
	admissionv1beta1.AdmissionRequest
}

Request defines the input for an admission handler. It contains information to identify the object in question (group, version, kind, resource, subresource, name, namespace), as well as the operation in question (e.g. Get, Create, etc), and the object itself.

type Response ¶

type Response struct {
	// Patches are the JSON patches for mutating webhooks.
	// Using this instead of setting Response.Patch to minimize
	// overhead of serialization and deserialization.
	// Patches set here will override any patches in the response,
	// so leave this empty if you want to set the patch response directly.
	Patches []jsonpatch.JsonPatchOperation
	// AdmissionResponse is the raw admission response.
	// The Patch field in it will be overwritten by the listed patches.
	admissionv1beta1.AdmissionResponse
}

Response is the output of an admission handler. It contains a response indicating if a given operation is allowed, as well as a set of patches to mutate the object in the case of a mutating admission handler.

func Allowed(reason string) Response

func Denied(reason string) Response

func ErrorResponse(code int32, err error) Response

func PatchResponseFromRaw(original, current []byte) Response

func Patched(reason string, patches ...jsonpatch.JsonPatchOperation) Response

func ValidationResponse(allowed bool, reason string) Response

func (this *Response) Complete(req Request) error

type ValidatingWebhookDeclaration ¶

type ValidatingWebhookDeclaration struct {
	adminreg.ValidatingWebhook
}

func (this *ValidatingWebhookDeclaration) DeepCopy() *adminreg.ValidatingWebhook

func (this *ValidatingWebhookDeclaration) Kind() webhook.WebhookKind

type WebhookFunc ¶

type WebhookFunc func(logger.LogContext, Request) Response

WebhookFunc implements Handler interface using a single function.

func (this WebhookFunc) Handle(logger logger.LogContext, req Request) Response

func (this WebhookFunc) Type() AdmissionHandlerType