admissionpluginconfig

Documentation

Index

• func ConfigureAdmissionPlugins(recommendedOptions *options.RecommendedOptions, ...) error
• func ValidateAdmissionPluginNames(pluginNames []string) error

Functions

func ConfigureAdmissionPlugins

func ConfigureAdmissionPlugins(recommendedOptions *options.RecommendedOptions, disableAdmissionPlugins []string) error

ConfigureAdmissionPlugins may choose to reconfigure the admission plugins present on the given RecommendedOptions by mutating it.

The ValidatingAdmissionPolicy feature gate became enabled by default in Kube 1.30. When Pinniped is compiled using the Kube 1.30+ libraries, and when installed onto a Kube cluster older than 1.30, then the new admission ValidatingAdmissionPolicy plugin prevents all our aggregated APIs from working, seemingly because it fails to sync informers created for watching the related resources. As a workaround, ask the k8s API server if it has the ValidatingAdmissionPolicy resource, and configure our admission plugins accordingly.

Any plugin name passed via the disableAdmissionPlugins parameter will also be disabled. The values in this parameter should be validated by the caller using ValidateAdmissionPluginNames before being passed into this function.

func ValidateAdmissionPluginNames

func ValidateAdmissionPluginNames(pluginNames []string) error

ValidateAdmissionPluginNames returns an error if any of the given pluginNames is unrecognized.