kubernetes: k8s.io/kubernetes/plugin/pkg/admission/certificates/subjectrestriction Index | Files

package subjectrestriction

import "k8s.io/kubernetes/plugin/pkg/admission/certificates/subjectrestriction"

Index

Package Files

admission.go

Constants

const PluginName = "CertificateSubjectRestriction"

PluginName is a string with the name of the plugin

func Register Uses

func Register(plugins *admission.Plugins)

Register registers the plugin

type Plugin Uses

type Plugin struct {
    *admission.Handler
}

Plugin holds state for and implements the admission plugin.

func NewPlugin Uses

func NewPlugin() *Plugin

NewPlugin constructs a new instance of the CertificateSubjectRestrictions admission interface.

func (*Plugin) Validate Uses

func (p *Plugin) Validate(_ context.Context, a admission.Attributes, _ admission.ObjectInterfaces) error

Validate ensures that if the signerName on a CSR is set to `kubernetes.io/kube-apiserver-client`, that its organization (group) attribute is not set to `system:masters`.

func (*Plugin) ValidateInitialization Uses

func (p *Plugin) ValidateInitialization() error

ValidateInitialization always returns nil.

Package subjectrestriction imports 7 packages (graph) and is imported by 19 packages. Updated 2020-07-20. Refresh now. Tools for package owners.