package resourcequota

import "k8s.io/kubernetes/plugin/pkg/admission/resourcequota"

resourcequota enforces all incoming requests against any applied quota in the namespace context of the request

Index ¶

• func IsDefaultDeny(err error) bool
• func LoadConfiguration(config io.Reader) (*resourcequotaapi.Configuration, error)
• func Register(plugins *admission.Plugins)
• type Evaluator
• func NewQuotaEvaluator(quotaAccessor QuotaAccessor, quotaConfiguration quota.Configuration, lockAcquisitionFunc func([]api.ResourceQuota) func(), config *resourcequotaapi.Configuration, workers int, stopCh <-chan struct{}) Evaluator
• type QuotaAccessor
• type QuotaAdmission
• func NewResourceQuota(config *resourcequotaapi.Configuration, numEvaluators int, stopCh <-chan struct{}) (*QuotaAdmission, error)
• func (a *QuotaAdmission) SetInternalKubeClientSet(client internalclientset.Interface)
• func (a *QuotaAdmission) SetInternalKubeInformerFactory(f informers.SharedInformerFactory)
• func (a *QuotaAdmission) SetQuotaConfiguration(c quota.Configuration)
• func (a *QuotaAdmission) Validate(attr admission.Attributes) (err error)
• func (a *QuotaAdmission) ValidateInitialization() error

Functions ¶

func IsDefaultDeny ¶

func IsDefaultDeny(err error) bool

IsDefaultDeny returns true if the error is defaultDeny

func LoadConfiguration ¶

func LoadConfiguration(config io.Reader) (*resourcequotaapi.Configuration, error)

LoadConfiguration loads the provided configuration.

func Register ¶

func Register(plugins *admission.Plugins)

Register registers a plugin

Types ¶

type Evaluator ¶

type Evaluator interface {
	// Evaluate takes an operation and checks to see if quota constraints are satisfied.  It returns an error if they are not.
	// The default implementation process related operations in chunks when possible.
	Evaluate(a admission.Attributes) error
}

Evaluator is used to see if quota constraints are satisfied.

func NewQuotaEvaluator ¶

func NewQuotaEvaluator(quotaAccessor QuotaAccessor, quotaConfiguration quota.Configuration, lockAcquisitionFunc func([]api.ResourceQuota) func(), config *resourcequotaapi.Configuration, workers int, stopCh <-chan struct{}) Evaluator

NewQuotaEvaluator configures an admission controller that can enforce quota constraints using the provided registry. The registry must have the capability to handle group/kinds that are persisted by the server this admission controller is intercepting

type QuotaAccessor ¶

type QuotaAccessor interface {
	// UpdateQuotaStatus is called to persist final status.  This method should write to persistent storage.
	// An error indicates that write didn't complete successfully.
	UpdateQuotaStatus(newQuota *api.ResourceQuota) error

	// GetQuotas gets all possible quotas for a given namespace
	GetQuotas(namespace string) ([]api.ResourceQuota, error)
}

QuotaAccessor abstracts the get/set logic from the rest of the Evaluator. This could be a test stub, a straight passthrough, or most commonly a series of deconflicting caches.

type QuotaAdmission ¶

type QuotaAdmission struct {
	*admission.Handler
	// contains filtered or unexported fields
}

QuotaAdmission implements an admission controller that can enforce quota constraints

func NewResourceQuota ¶

func NewResourceQuota(config *resourcequotaapi.Configuration, numEvaluators int, stopCh <-chan struct{}) (*QuotaAdmission, error)

NewResourceQuota configures an admission controller that can enforce quota constraints using the provided registry. The registry must have the capability to handle group/kinds that are persisted by the server this admission controller is intercepting

func (*QuotaAdmission) SetInternalKubeClientSet ¶

func (a *QuotaAdmission) SetInternalKubeClientSet(client internalclientset.Interface)

func (*QuotaAdmission) SetInternalKubeInformerFactory ¶

func (a *QuotaAdmission) SetInternalKubeInformerFactory(f informers.SharedInformerFactory)

func (*QuotaAdmission) SetQuotaConfiguration ¶

func (a *QuotaAdmission) SetQuotaConfiguration(c quota.Configuration)

func (*QuotaAdmission) Validate ¶

func (a *QuotaAdmission) Validate(attr admission.Attributes) (err error)

Validate makes admission decisions while enforcing quota

func (*QuotaAdmission) ValidateInitialization ¶

func (a *QuotaAdmission) ValidateInitialization() error

ValidateInitialization ensures an authorizer is set.

Source Files ¶

admission.go config.go controller.go doc.go resource_access.go

Directories ¶