package injector

import "gvisor.dev/gvisor/webhook/pkg/injector"

Package injector handles mutating webhook operations.

Index ¶

• Constants
• func Admit(writer http.ResponseWriter, req *http.Request)
• func CreateConfiguration(clientset kubeclientset.Interface, selector *metav1.LabelSelector) error
• func GetTLSConfig() *tls.Config

Constants ¶

const (
	// Name is the name of the admission webhook service. The admission
	// webhook must be exposed in the following service; this is mainly for
	// the server certificate.
	Name = "gvisor-injection-admission-webhook"
)

Functions ¶

func Admit ¶

func Admit(writer http.ResponseWriter, req *http.Request)

Admit performs admission checks and mutations on Pods.

func CreateConfiguration ¶

func CreateConfiguration(clientset kubeclientset.Interface, selector *metav1.LabelSelector) error

CreateConfiguration creates MutatingWebhookConfiguration and registers the webhook admission controller with the kube-apiserver. The webhook will only take effect on pods in the namespaces selected by `podNsSelector`. If `podNsSelector` is empty, the webhook will take effect on all pods.

func GetTLSConfig ¶

func GetTLSConfig() *tls.Config

GetTLSConfig retrieves the CA cert that signed the cert used by the webhook.

Source Files ¶

certs.go webhook.go