admission

Documentation

Index

• type ControllerConfiguration
• type Hook
  • func NewHook(config *ControllerConfiguration, clientset *k8s.Clientset, ...) *Hook
  • func (h *Hook) Initialize(*rest.Config, <-chan struct{}) error
  • func (h *Hook) Validate(admissionRequest *admissionV1.AdmissionRequest) *admissionV1.AdmissionResponse
  • func (h *Hook) ValidatingResource() (plural schema.GroupVersionResource, singular string)
• type ValidatorConfiguration

Types

type ControllerConfiguration

type ControllerConfiguration struct {
	Validator ValidatorConfiguration

	AnchoreEndpoint string // The full url to use for interacting with anchore.

	PolicySelectors []validation.PolicySelector
}

type Hook

type Hook struct {
	// contains filtered or unexported fields
}

Hook is the Anchore-specific implementation of a Kubernetes validating admission hook.

func NewHook

func NewHook(
	config *ControllerConfiguration,
	clientset *k8s.Clientset,
	anchoreAuth *anchore.AuthConfiguration,
	imageBackend anchore.ImageBackend,
) *Hook

NewHook creates and returns a new Hook.

func (*Hook) Initialize

func (h *Hook) Initialize(*rest.Config, <-chan struct{}) error

func (*Hook) Validate

func (h *Hook) Validate(admissionRequest *admissionV1.AdmissionRequest) *admissionV1.AdmissionResponse

func (*Hook) ValidatingResource

func (h *Hook) ValidatingResource() (plural schema.GroupVersionResource, singular string)

type ValidatorConfiguration

type ValidatorConfiguration struct {
	Enabled         bool
	RequestAnalysis bool
}