Help us shape the future of Go! Take the 2026 Go Developer Survey

exec

package
v1.14.9 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 9, 2019 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// DenyEscalatingExec indicates name of admission plugin.
	// Deprecated, will be removed in v1.18.
	// Use of PodSecurityPolicy or a custom admission plugin to limit creation of pods is recommended instead.
	DenyEscalatingExec = "DenyEscalatingExec"
	// DenyExecOnPrivileged indicates name of admission plugin.
	// Deprecated, will be removed in v1.18.
	// Use of PodSecurityPolicy or a custom admission plugin to limit creation of pods is recommended instead.
	DenyExecOnPrivileged = "DenyExecOnPrivileged"
)

Variables

This section is empty.

Functions

func Register added in v1.7.0

func Register(plugins *admission.Plugins)

Register registers a plugin

Types

type DenyExec added in v1.9.0

type DenyExec struct {
	*admission.Handler
	// contains filtered or unexported fields
}

DenyExec is an implementation of admission.Interface which says no to a pod/exec on a pod using host based configurations.

func NewDenyEscalatingExec

func NewDenyEscalatingExec() *DenyExec

NewDenyEscalatingExec creates a new admission controller that denies an exec operation on a pod using host based configurations.

func NewDenyExecOnPrivileged

func NewDenyExecOnPrivileged() *DenyExec

NewDenyExecOnPrivileged creates a new admission controller that is only checking the privileged option. This is for legacy support of the DenyExecOnPrivileged admission controller. Most of the time NewDenyEscalatingExec should be preferred.

func (*DenyExec) SetExternalKubeClientSet added in v1.13.0

func (d *DenyExec) SetExternalKubeClientSet(client kubernetes.Interface)

SetExternalKubeClientSet implements the WantsInternalKubeClientSet interface.

func (*DenyExec) Validate added in v1.9.0

func (d *DenyExec) Validate(a admission.Attributes, o admission.ObjectInterfaces) (err error)

Validate makes an admission decision based on the request attributes

func (*DenyExec) ValidateInitialization added in v1.9.0

func (d *DenyExec) ValidateInitialization() error

ValidateInitialization implements the InitializationValidator interface.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL