package scdeny

import "k8s.io/kubernetes/plugin/pkg/admission/securitycontext/scdeny"

Index ¶

• Constants
• func Register(plugins *admission.Plugins)
• type Plugin
• func NewSecurityContextDeny() *Plugin
• func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error)

Constants ¶

const PluginName = "SecurityContextDeny"

PluginName indicates name of admission plugin.

Functions ¶

func Register ¶

func Register(plugins *admission.Plugins)

Register registers a plugin

Types ¶

type Plugin ¶

type Plugin struct {
	*admission.Handler
}

Plugin implements admission.Interface.

func NewSecurityContextDeny ¶

func NewSecurityContextDeny() *Plugin

NewSecurityContextDeny creates a new instance of the SecurityContextDeny admission controller

func (*Plugin) Validate ¶

func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error)

Validate will deny any pod that defines SupplementalGroups, SELinuxOptions, RunAsUser or FSGroup

Source Files ¶

admission.go