podsecuritypolicy

Documentation

Index

• Constants
• func NewPlugin(strategyFactory psp.StrategyFactory, pspMatcher PSPMatchFn, ...) *podSecurityPolicyPlugin
• func ObserveAdmit(rejected bool, attr admission.Attributes)
• func Register(plugins *admission.Plugins)
• type PSPMatchFn

Constants

const (
	PluginName = "PodSecurityPolicy"
)

Functions

func NewPlugin

func NewPlugin(strategyFactory psp.StrategyFactory, pspMatcher PSPMatchFn, failOnNoPolicies bool) *podSecurityPolicyPlugin

NewPlugin creates a new PSP admission plugin.

func ObserveAdmit

func ObserveAdmit(rejected bool, attr admission.Attributes)

func Register

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type PSPMatchFn

type PSPMatchFn func(lister extensionslisters.PodSecurityPolicyLister, user user.Info, sa user.Info, authz authorizer.Authorizer, namespace string) ([]*extensions.PodSecurityPolicy, error)

PSPMatchFn allows plugging in how PSPs are matched against user information.