import "k8s.io/kubernetes/plugin/pkg/admission/exec"
const ( // DenyEscalatingExec indicates name of admission plugin. // Deprecated, will be removed in v1.18. // Use of PodSecurityPolicy or a custom admission plugin to limit creation of pods is recommended instead. DenyEscalatingExec = "DenyEscalatingExec" // DenyExecOnPrivileged indicates name of admission plugin. // Deprecated, will be removed in v1.18. // Use of PodSecurityPolicy or a custom admission plugin to limit creation of pods is recommended instead. DenyExecOnPrivileged = "DenyExecOnPrivileged" )
Register registers a plugin
DenyExec is an implementation of admission.Interface which says no to a pod/exec on a pod using host based configurations.
NewDenyEscalatingExec creates a new admission controller that denies an exec operation on a pod using host based configurations.
NewDenyExecOnPrivileged creates a new admission controller that is only checking the privileged option. This is for legacy support of the DenyExecOnPrivileged admission controller. Most of the time NewDenyEscalatingExec should be preferred.
func (d *DenyExec) SetExternalKubeClientSet(client kubernetes.Interface)
SetExternalKubeClientSet implements the WantsInternalKubeClientSet interface.
func (d *DenyExec) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error)
Validate makes an admission decision based on the request attributes
ValidateInitialization implements the InitializationValidator interface.
Package exec imports 10 packages (graph) and is imported by 83 packages. Updated 2020-05-17. Refresh now. Tools for package owners.