webhookserver

Documentation

Overview

Package webhookserver provides kubernetes admission webhook server

Index

• Constants
• func NewManager(port int, healthProbeBindAddress string, leaderElection bool) manager.Manager
• func RegisterCertRotator(mgr manager.Manager, isReady chan struct{}, namespace string, ...)
• func RegisterControllers(mgr manager.Manager, cfg PodAgentContainerConfig, logger *zap.SugaredLogger)
• type PodAgentContainerConfig
• type PodAgentInjector
  • func (p *PodAgentInjector) Handle(ctx context.Context, req admission.Request) admission.Response
  • func (p *PodAgentInjector) InjectDecoder(d *admission.Decoder) error

Constants

const (
	ThreatScanAnnotation              = "pod-agent.k8s.tarian.dev/threat-scan"
	RegisterAnnotation                = "pod-agent.k8s.tarian.dev/register"
	FileValidationIntervalAnnotation  = "pod-agent.k8s.tarian.dev/file-validation-interval"
	RegisterFileIgnorePathsAnnotation = "pod-agent.k8s.tarian.dev/register-file-ignore-paths"
)

Functions

func NewManager

func NewManager(port int, healthProbeBindAddress string, leaderElection bool) manager.Manager

func RegisterCertRotator

func RegisterCertRotator(mgr manager.Manager, isReady chan struct{}, namespace string, mutatingWebhookConfigurationName string, secretName string)

func RegisterControllers

func RegisterControllers(mgr manager.Manager, cfg PodAgentContainerConfig, logger *zap.SugaredLogger)

Types

type PodAgentContainerConfig

type PodAgentContainerConfig struct {
	Name        string
	Image       string
	LogEncoding string
	Host        string
	Port        string
}

type PodAgentInjector

type PodAgentInjector struct {
	Client client.Client
	// contains filtered or unexported fields
}

func (*PodAgentInjector) Handle

func (p *PodAgentInjector) Handle(ctx context.Context, req admission.Request) admission.Response

podAnnotator adds an annotation to every incoming pods.

func (*PodAgentInjector) InjectDecoder

func (p *PodAgentInjector) InjectDecoder(d *admission.Decoder) error

InjectDecoder injects the decoder.