workspace

Documentation

Index

• Constants
• func BuildMutateWebhookCfg(namespace string) *admregv1.MutatingWebhookConfiguration
• func Configure(ctx context.Context, mgr manager.Manager) error
• type ResourcesMutator
  • func NewResourcesMutator(controllerUID, controllerSAName string, mgr manager.Manager) *ResourcesMutator
  • func (m *ResourcesMutator) Handle(ctx context.Context, req admission.Request) admission.Response
• type ResourcesValidator
  • func NewResourcesValidator(controllerUID, controllerSAName string, mgr manager.Manager) *ResourcesValidator
  • func (v *ResourcesValidator) Handle(ctx context.Context, req admission.Request) admission.Response

Constants

const (
	MutateWebhookCfgName = "controller.devfile.io"
)

const (
	ValidateWebhookCfgName = "controller.devfile.io"
)

Functions

func BuildMutateWebhookCfg

func BuildMutateWebhookCfg(namespace string) *admregv1.MutatingWebhookConfiguration

BuildMutateWebhookCfg creates the mutating webhook configuration for the controller

func Configure

func Configure(ctx context.Context, mgr manager.Manager) error

Configure configures mutate/validating webhooks that provides exec access into workspace for creator only

Types

type ResourcesMutator

type ResourcesMutator struct {
	*handler.WebhookHandler
}

ResourcesMutator checks that every: - workspace has creator label specified and it's not modified - workspace-related deployment, pod has unmodified workspace-id label and creator label

func NewResourcesMutator

func NewResourcesMutator(controllerUID, controllerSAName string, mgr manager.Manager) *ResourcesMutator

func (*ResourcesMutator) Handle

func (m *ResourcesMutator) Handle(ctx context.Context, req admission.Request) admission.Response

ResourcesMutator verify if operation is a valid from Workspace controller perspective

type ResourcesValidator

type ResourcesValidator struct {
	*handler.WebhookHandler
}

ResourcesValidator validates execs process all exec requests and: if related pod DOES NOT have workspace_id label - just skip it if related pod DOES have workspace_id label - make sure that exec is requested by workspace creator

func NewResourcesValidator

func NewResourcesValidator(controllerUID, controllerSAName string, mgr manager.Manager) *ResourcesValidator

func (*ResourcesValidator) Handle

func (v *ResourcesValidator) Handle(ctx context.Context, req admission.Request) admission.Response