Package mutating delegates admission checks to dynamically configured mutating webhooks.
Package mutating makes calls to mutating webhooks during the admission process.
const ( // PatchAuditAnnotationPrefix is a prefix for persisting webhook patch in audit annotation. // Audit handler decides whether annotation with this prefix should be logged based on audit level. // Since mutating webhook patches the request body, audit level must be greater or equal to Request // for the annotation to be logged PatchAuditAnnotationPrefix = "patch.webhook.admission.k8s.io/" // MutationAuditAnnotationPrefix is a prefix for presisting webhook mutation existence in audit annotation. MutationAuditAnnotationPrefix = "mutation.webhook.admission.k8s.io/" )
const ( // PluginName indicates the name of admission plug-in PluginName = "MutatingAdmissionWebhook" )
Register registers a plugin
MutationAuditAnnotation logs if a webhook invocation mutated the request object
PatchAuditAnnotation logs a patch from a mutating webhook
Plugin is an implementation of admission.Interface.
NewMutatingWebhook returns a generic admission webhook plugin.
func (a *Plugin) Admit(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error
Admit makes an admission decision based on the request attributes.
ValidateInitialization implements the InitializationValidator interface.