openshiftadmission

Documentation

Index

• Variables
• func NewPluginInitializer(externalImageRegistryHostnames []string, internalImageRegistryHostname string, ...) (admission.PluginInitializer, error)
• func RegisterAllAdmissionPlugins(plugins *admission.Plugins)
• func RegisterOpenshiftAdmissionPlugins(plugins *admission.Plugins)
• func ToAdmissionConfigFile(pluginConfig map[string]configv1.AdmissionPluginConfig) (string, func(), error)
• type InformerAccess

Variables

var (
	// OpenShiftAdmissionPlugins gives the in-order default admission chain for openshift resources.
	OpenShiftAdmissionPlugins = []string{

		"NamespaceLifecycle",
		"OwnerReferencesPermissionEnforcement",

		"project.openshift.io/ProjectRequestLimit",
		"build.openshift.io/BuildConfigSecretInjector",
		"build.openshift.io/BuildByStrategy",
		"image.openshift.io/ImageLimitRange",
		"image.openshift.io/ImagePolicy",
		"scheduling.openshift.io/PodNodeConstraints",
		"quota.openshift.io/ClusterResourceQuota",

		"MutatingAdmissionWebhook",
		"ValidatingAdmissionWebhook",
		"ResourceQuota",
	}
)

var OriginAdmissionPlugins = admission.NewPlugins()

TODO register this per apiserver or at least per process

Functions

func NewPluginInitializer

func NewPluginInitializer(
	externalImageRegistryHostnames []string,
	internalImageRegistryHostname string,
	cloudConfigFile string,
	privilegedLoopbackConfig *rest.Config,
	informers InformerAccess,
	authorizer authorizer.Authorizer,
	projectCache *projectcache.ProjectCache,
	restMapper meta.RESTMapper,
	clusterQuotaMappingController *clusterquotamapping.ClusterQuotaMappingController,
) (admission.PluginInitializer, error)

func RegisterAllAdmissionPlugins

func RegisterAllAdmissionPlugins(plugins *admission.Plugins)

RegisterAllAdmissionPlugins registers all admission plugins

func RegisterOpenshiftAdmissionPlugins

func RegisterOpenshiftAdmissionPlugins(plugins *admission.Plugins)

func ToAdmissionConfigFile

func ToAdmissionConfigFile(pluginConfig map[string]configv1.AdmissionPluginConfig) (string, func(), error)

Types

type InformerAccess

type InformerAccess interface {
	GetKubernetesInformers() kexternalinformers.SharedInformerFactory
	GetOpenshiftImageInformers() imagev1informer.SharedInformerFactory
	GetOpenshiftQuotaInformers() quotainformer.SharedInformerFactory
	GetOpenshiftSecurityInformers() securityv1informer.SharedInformerFactory
	GetOpenshiftUserInformers() userv1informer.SharedInformerFactory
}