skipper

Documentation

Index

• type PrivilegedUserSkipper
  • func (s *PrivilegedUserSkipper) Skip(ctx context.Context, req admission.Request) (bool, error)
• type Skipper
  • func NewMultiSkipper(skipper ...Skipper) Skipper
• type StaticSkipper
  • func (s StaticSkipper) Skip(_ context.Context, _ admission.Request) (bool, error)

Types

type PrivilegedUserSkipper

type PrivilegedUserSkipper struct {
	Client client.Reader

	PrivilegedGroups []string
	PrivilegedUsers  []string
	// PrivilegedClusterRoles is a list cluster roles allowed to bypass restrictions.
	// Wildcards are supported (e.g. "system:serviceaccount:default:*" or "cluster-*-operator").
	// ClusterRoles are only ever matched if they are bound through a ClusterRoleBinding,
	// this is different from the behavior of Kyverno.
	// This is done to prevent a user from wrongly configuring a low-privileged ClusterRole which users
	// can then bind to themselves to bypass the restrictions.
	PrivilegedClusterRoles []string
}

PrivilegedUserSkipper skips request validations for privileged users.

func (*PrivilegedUserSkipper) Skip

func (s *PrivilegedUserSkipper) Skip(ctx context.Context, req admission.Request) (bool, error)

type Skipper

type Skipper interface {
	Skip(context.Context, admission.Request) (bool, error)
}

func NewMultiSkipper

func NewMultiSkipper(skipper ...Skipper) Skipper

NewMultiSkipper returns a Skipper that skips if any of the given Skipper skip.

type StaticSkipper

type StaticSkipper struct {
	ShouldSkip bool
}

StaticSkipper is a Skipper that never/always skips.

func (StaticSkipper) Skip

func (s StaticSkipper) Skip(_ context.Context, _ admission.Request) (bool, error)