webhooks

Documentation

Index

• type CELExceptionHandlers
• type DebugModeOptions
• type ExceptionHandlers
• type GlobalContextHandlers
• type Handler
• type HandlerFunc
  • func (f HandlerFunc) Execute(ctx context.Context, logger logr.Logger, request handlers.AdmissionRequest, ...) admissionv1.AdmissionResponse
• type PolicyHandlers
• type ResourceHandlers
• type Server
  • func NewServer(ctx context.Context, policyHandlers PolicyHandlers, ...) Server
• type TlsProvider

Types

type CELExceptionHandlers

type CELExceptionHandlers struct {
	// Validation performs the validation check on cel exception resources
	Validation Handler
}

type DebugModeOptions

type DebugModeOptions struct {
	// DumpPayload is used to activate/deactivate debug mode.
	DumpPayload bool
}

DebugModeOptions holds the options to configure debug mode

type ExceptionHandlers

type ExceptionHandlers struct {
	// Validation performs the validation check on exception resources
	Validation Handler
}

type GlobalContextHandlers

type GlobalContextHandlers struct {
	// Validation performs the validation check on global context entries
	Validation Handler
}

type Handler

type Handler interface {
	Execute(context.Context, logr.Logger, handlers.AdmissionRequest, string, time.Time) admissionv1.AdmissionResponse
}

type HandlerFunc

type HandlerFunc func(context.Context, logr.Logger, handlers.AdmissionRequest, string, time.Time) admissionv1.AdmissionResponse

func (HandlerFunc) Execute

func (f HandlerFunc) Execute(ctx context.Context, logger logr.Logger, request handlers.AdmissionRequest, failurePolicy string, startTime time.Time) admissionv1.AdmissionResponse

type PolicyHandlers

type PolicyHandlers struct {
	// Mutation performs the mutation of policy resources
	Mutation Handler
	// Validation performs the validation check on policy resources
	Validation Handler
}

type ResourceHandlers

type ResourceHandlers struct {
	// Mutation performs the mutation of kube resources
	Mutation Handler
	// Validation performs the validation check on kube resources
	Validation Handler
	// ValidatingPolicies evaluates validating policies against kube resources
	ValidatingPolicies Handler
	// ImageVerificationPolicies evaluates imageverificationpolicies mutation phase against kube resources
	ImageVerificationPoliciesMutation Handler
	// ImageVerificationPolicies evaluates imageverificationpolicies validation phase against kube resources
	ImageVerificationPolicies Handler
}

type Server

type Server interface {
	// Run TLS server in separate thread and returns control immediately
	Run()
	// Stop TLS server and returns control after the server is shut down
	Stop()
}

func NewServer

func NewServer(
	ctx context.Context,
	policyHandlers PolicyHandlers,
	resourceHandlers ResourceHandlers,
	exceptionHandlers ExceptionHandlers,
	celExceptionHandlers CELExceptionHandlers,
	globalContextHandlers GlobalContextHandlers,
	configuration config.Configuration,
	metricsConfig metrics.MetricsConfigManager,
	debugModeOpts DebugModeOptions,
	tlsProvider TlsProvider,
	mwcClient controllerutils.DeleteCollectionClient,
	vwcClient controllerutils.DeleteCollectionClient,
	leaseClient controllerutils.DeleteClient,
	runtime runtimeutils.Runtime,
	rbLister rbacv1listers.RoleBindingLister,
	crbLister rbacv1listers.ClusterRoleBindingLister,
	discovery dclient.IDiscovery,
	webhookServerPort int32,
) Server

NewServer creates new instance of server accordingly to given configuration

type TlsProvider

type TlsProvider func() ([]byte, []byte, error)