Documentation
¶
Index ¶
Constants ¶
const SecretBindingPluginName = "ComputeSecretBindings"
SecretBindingPluginName identifies the compute secret-binding validation plugin in the admission chain.
Variables ¶
This section is empty.
Functions ¶
func New ¶
func New(informers a3yinformers.SharedInformerFactory, client a3yclient.Interface) admission.PluginInitializer
New returns a new admission.PluginInitializer that injects the Apoxy SharedInformerFactory and client into plugins implementing the corresponding Wants* interfaces.
func NewSecretBindingPlugin ¶
NewSecretBindingPlugin validates the secret bindings of compute Services and ServiceRevisions on write: the referenced SecretStore must exist, its scopes must admit the service on the "compute" surface, and the bound key must be present in the store. This makes `apoxy apply` fail fast; the data-plane resolver re-checks at materialization time to cover stores that change after admission.
Types ¶
type WantsApoxyClient ¶
type WantsApoxyClient interface {
SetApoxyClient(a3yclient.Interface)
admission.InitializationValidator
}
WantsApoxyClient defines an interface for admission plugins that need a typed Apoxy client to read or write resources during admission.
type WantsApoxyInformerFactory ¶
type WantsApoxyInformerFactory interface {
SetApoxyInformerFactory(a3yinformers.SharedInformerFactory)
admission.InitializationValidator
}
WantsApoxyInformerFactory defines an interface for admission plugins that need access to the Apoxy SharedInformerFactory for cross-resource validation and mutation.
Source Files