webhook

Documentation

Overview

Package webhook implements Kubernetes admission hooks for KNXVault.

Index

• func BuildJSONPatch(pod *corev1.Pod) ([]byte, error)
• func HandleAdmissionReview(review admissionv1.AdmissionReview) admissionv1.AdmissionReview
• func MutatePod(pod *corev1.Pod) (bool, error)

Functions

func BuildJSONPatch

func BuildJSONPatch(pod *corev1.Pod) ([]byte, error)

BuildJSONPatch returns a JSON Patch for the pod mutation. Uses full-array replace when volumes/volumeMounts were empty so RFC 6902 does not fail on null parents (tech review M12).

func HandleAdmissionReview

func HandleAdmissionReview(review admissionv1.AdmissionReview) admissionv1.AdmissionReview

HandleAdmissionReview patches Pod create/update requests.

func MutatePod

func MutatePod(pod *corev1.Pod) (bool, error)

MutatePod injects a Secrets Store CSI volume when knxvault.io/inject=true.