package podsecuritypolicy

import "k8s.io/kubernetes/plugin/pkg/admission/security/podsecuritypolicy"

Index ¶

• Constants
• func NewPlugin(strategyFactory psp.StrategyFactory, pspMatcher PSPMatchFn, failOnNoPolicies bool) *podSecurityPolicyPlugin
• func ObserveAdmit(rejected bool, attr admission.Attributes)
• func Register(plugins *admission.Plugins)
• type PSPMatchFn

Constants ¶

const (
	PluginName = "PodSecurityPolicy"
)

Functions ¶

func NewPlugin ¶

func NewPlugin(strategyFactory psp.StrategyFactory, pspMatcher PSPMatchFn, failOnNoPolicies bool) *podSecurityPolicyPlugin

NewPlugin creates a new PSP admission plugin.

func ObserveAdmit ¶

func ObserveAdmit(rejected bool, attr admission.Attributes)

func Register ¶

func Register(plugins *admission.Plugins)

Register registers a plugin

Types ¶

type PSPMatchFn ¶

type PSPMatchFn func(lister extensionslisters.PodSecurityPolicyLister, user user.Info, sa user.Info, authz authorizer.Authorizer, namespace string) ([]*extensions.PodSecurityPolicy, error)

PSPMatchFn allows plugging in how PSPs are matched against user information.

Source Files ¶

admission.go metrics.go