webhook

type Config struct {
	// KargoNamespace is the namespace in which Kargo is installed.
	KargoNamespace string `envconfig:"KARGO_NAMESPACE" required:"true"`
	// RawControlplaneUserRegex is a regular expression to match the username in
	// admission request to distinguish if the request is coming from controlplane.
	RawControlplaneUserRegex string         `envconfig:"CONTROLPLANE_USER_REGEX"`
	ControlplaneUserRegex    *regexp.Regexp `ignored:"true"`
	// ManagementControllerUsername is the exact username (typically a service
	// account name) of the management controller. This is used where only the
	// management controller (not the API server or other controlplane
	// components) should be permitted to act.
	ManagementControllerUsername string `envconfig:"MANAGEMENT_CONTROLLER_USERNAME"`
}

type IsRequestFromKargoControlplaneFn func(admission.Request) bool