package exec

import "k8s.io/kubernetes/plugin/pkg/admission/exec"

Index ¶

• func Register(plugins *admission.Plugins)
• type DenyExec
• func NewDenyEscalatingExec() *DenyExec
• func NewDenyExecOnPrivileged() *DenyExec
• func (d *DenyExec) SetInternalKubeClientSet(client internalclientset.Interface)
• func (d *DenyExec) Validate(a admission.Attributes) (err error)
• func (d *DenyExec) ValidateInitialization() error

Functions ¶

func Register ¶

func Register(plugins *admission.Plugins)

Register registers a plugin

Types ¶

type DenyExec ¶

type DenyExec struct {
	*admission.Handler
	// contains filtered or unexported fields
}

DenyExec is an implementation of admission.Interface which says no to a pod/exec on a pod using host based configurations.

func NewDenyEscalatingExec ¶

func NewDenyEscalatingExec() *DenyExec

NewDenyEscalatingExec creates a new admission controller that denies an exec operation on a pod using host based configurations.

func NewDenyExecOnPrivileged ¶

func NewDenyExecOnPrivileged() *DenyExec

NewDenyExecOnPrivileged creates a new admission controller that is only checking the privileged option. This is for legacy support of the DenyExecOnPrivileged admission controller. Most of the time NewDenyEscalatingExec should be preferred.

func (*DenyExec) SetInternalKubeClientSet ¶

func (d *DenyExec) SetInternalKubeClientSet(client internalclientset.Interface)

SetInternalKubeClientSet implements the WantsInternalKubeClientSet interface.

func (*DenyExec) Validate ¶

func (d *DenyExec) Validate(a admission.Attributes) (err error)

Validate makes an admission decision based on the request attributes

func (*DenyExec) ValidateInitialization ¶

func (d *DenyExec) ValidateInitialization() error

ValidateInitialization implements the InitializationValidator interface.

Source Files ¶

admission.go