webhookconfig

Documentation

Index

• type Monitor
  • func NewMonitor(nsInformer informerv1.SecretInformer, log logr.Logger) *Monitor
  • func (t *Monitor) Run(register *Register, certRenewer *tls.CertRenewer, eventGen event.Interface, ...)
  • func (t *Monitor) SetTime(tm time.Time)
  • func (t *Monitor) Time() time.Time
• type Register
  • func NewRegister(clientConfig *rest.Config, client *client.Client, ...) *Register
  • func (wrc *Register) Check() error
  • func (wrc *Register) GetKubePolicyDeployment() (*apps.Deployment, *unstructured.Unstructured, error)
  • func (wrc *Register) GetWebhookTimeOut() time.Duration
  • func (wrc *Register) Register() error
  • func (wrc *Register) Remove(cleanUp chan<- struct{})

Types

type Monitor

type Monitor struct {
	// contains filtered or unexported fields
}

Monitor stores the last webhook request time and monitors registered webhooks.

If a webhook is not received in the idleCheckInterval the monitor triggers a change in the Kyverno deployment to force a webhook request. If no requests are received after idleDeadline the webhooks are deleted and re-registered.

Webhook configurations are checked every tickerInterval. Currently the check only queries for the expected resource name, and does not compare other details like the webhook settings.

func NewMonitor

func NewMonitor(nsInformer informerv1.SecretInformer, log logr.Logger) *Monitor

NewMonitor returns a new instance of webhook monitor

func (*Monitor) Run

func (t *Monitor) Run(register *Register, certRenewer *tls.CertRenewer, eventGen event.Interface, stopCh <-chan struct{})

Run runs the checker and verify the resource update

func (*Monitor) SetTime

func (t *Monitor) SetTime(tm time.Time)

SetTime updates the last request time

func (*Monitor) Time

func (t *Monitor) Time() time.Time

Time returns the last request time

type Register

type Register struct {
	// contains filtered or unexported fields
}

Register manages webhook registration. There are five webhooks: 1. Policy Validation 2. Policy Mutation 3. Resource Validation 4. Resource Mutation 5. Webhook Status Mutation

func NewRegister

func NewRegister(
	clientConfig *rest.Config,
	client *client.Client,
	resCache resourcecache.ResourceCache,
	serverIP string,
	webhookTimeout int32,
	debug bool,
	log logr.Logger) *Register

NewRegister creates new Register instance

func (*Register) Check

func (wrc *Register) Check() error

Check returns an error if any of the webhooks are not configured

func (*Register) GetKubePolicyDeployment

func (wrc *Register) GetKubePolicyDeployment() (*apps.Deployment, *unstructured.Unstructured, error)

GetKubePolicyDeployment gets Kyverno deployment

func (*Register) GetWebhookTimeOut

func (wrc *Register) GetWebhookTimeOut() time.Duration

GetWebhookTimeOut returns the value of webhook timeout

func (*Register) Register

func (wrc *Register) Register() error

Register clean up the old webhooks and re-creates admission webhooks configs on cluster

func (*Register) Remove

func (wrc *Register) Remove(cleanUp chan<- struct{})

Remove removes all webhook configurations