webhook

Documentation

Index

• Constants
• func AdmitFuncHandler(admit admitFunc) http.Handler
• type PatchOperation
  • func MutatePod(req *admissionv1.AdmissionRequest) ([]PatchOperation, error)
• type WebhookServer
  • func NewWebhookServer(ctx context.Context, port int32, tlsConfig *tls.Config) *WebhookServer
  • func (ws *WebhookServer) Start(stopCh <-chan struct{}) error

Constants

const (

	// default values
	DefaultContainerName       = "envoy-sidecar"
	DefaultImage               = "envoyproxy/envoy:v1.14.1"
	DefaultBootstrapConfigMap  = "envoy-sidecar-bootstrap"
	DefaultConfigVolume        = "envoy-sidecar-bootstrap"
	DefaultTLSVolume           = "envoy-sidecar-tls"
	DefaultClientCertificate   = "envoy-sidecar-client-cert"
	DefaultEnvoyExtraArgs      = ""
	DefaultEnvoyConfigBasePath = "/etc/envoy/bootstrap"
	DefaultEnvoyConfigFileName = "config.json"
	DefaultEnvoyTLSBasePath    = "/etc/envoy/tls/client"

	TlsCertificateSdsSecretFileName = "tls_certificate_sds_secret.yaml"
)

const (
	MutatePath string = "/mutate"
)

Functions

func AdmitFuncHandler

func AdmitFuncHandler(admit admitFunc) http.Handler

AdmitFuncHandler takes an admitFunc and wraps it into a http.Handler by means of calling serveAdmitFunc.

Types

type PatchOperation

type PatchOperation struct {
	Op    string      `json:"op"`
	Path  string      `json:"path"`
	Value interface{} `json:"value,omitempty"`
}

PatchOperation represents a JSON patch, see https://tools.ietf.org/html/rfc6902 .

func MutatePod

func MutatePod(req *admissionv1.AdmissionRequest) ([]PatchOperation, error)

MutatePod returns the PatchOperation required to inject the envoy sidecar container and its volumes in the pod

type WebhookServer

type WebhookServer struct {
	// contains filtered or unexported fields
}

func NewWebhookServer

func NewWebhookServer(ctx context.Context, port int32, tlsConfig *tls.Config) *WebhookServer

NewWebhookServer creates a new WebhookServer object fron the given params

func (*WebhookServer) Start

func (ws *WebhookServer) Start(stopCh <-chan struct{}) error

Start runs the mutating admission controller in a goroutine and waits forever until the stopper signal is sent.