webhooks

func Allow ¶

func Allow(msg string) admission.Response

Allow is a replacement for controller-runtime's admission.Allowed() that allows you to set the message (human-readable) as opposed to the reason (machine-readable).

func DenyBadRequest ¶ added in v1.0.0

func DenyBadRequest(err error) admission.Response

func DenyConflict ¶ added in v1.0.0

func DenyConflict(qualifiedResource schema.GroupResource, name string, err error) admission.Response

func DenyForbidden ¶ added in v1.0.0

func DenyForbidden(qualifiedResource schema.GroupResource, name string, err error) admission.Response

func DenyInternalError ¶ added in v1.0.0

func DenyInternalError(err error) admission.Response

func DenyInvalid ¶

func DenyInvalid(qualifiedKind schema.GroupKind, name string, errs field.ErrorList) admission.Response

func DenyServiceUnavailable ¶ added in v1.0.0

func DenyServiceUnavailable(reason string) admission.Response

func DenyUnauthorized ¶ added in v1.0.0

func DenyUnauthorized(reason string) admission.Response

func IsHNCServiceAccount ¶

func IsHNCServiceAccount(user *authnv1.UserInfo) bool

IsHNCServiceAccount is inspired by isGKServiceAccount from open-policy-agent/gatekeeper.