webhooks

package
v0.2.1-0...-c0b2d2c Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 5, 2026 License: Apache-2.0 Imports: 35 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	DefaultMachineMutatingHookPath                     = "/mutate-machine-openshift-io-v1beta1-machine"
	DefaultMachineValidatingHookPath                   = "/validate-machine-openshift-io-v1beta1-machine"
	DefaultMachineSetMutatingHookPath                  = "/mutate-machine-openshift-io-v1beta1-machineset"
	DefaultMachineSetValidatingHookPath                = "/validate-machine-openshift-io-v1beta1-machineset"
	DefaultMetal3RemediationMutatingHookPath           = "/mutate-infrastructure-cluster-x-k8s-io-v1beta1-metal3remediation"
	DefaultMetal3RemediationValidatingHookPath         = "/validate-infrastructure-cluster-x-k8s-io-v1beta1-metal3remediation"
	DefaultMetal3RemediationTemplateMutatingHookPath   = "/mutate-infrastructure-cluster-x-k8s-io-v1beta1-metal3remediationtemplate"
	DefaultMetal3RemediationTemplateValidatingHookPath = "/validate-infrastructure-cluster-x-k8s-io-v1beta1-metal3remediationtemplate"
)
View Source 
const (
	ARM64 machineArch = "arm64"
	AMD64 machineArch = "amd64"
)
View Source 
const (
	// VAPMachineFailureDomainName is the name of the ValidatingAdmissionPolicy that guards
	// against removing a vSphere failure domain that is still referenced by a Machine.
	VAPMachineFailureDomainName = "vsphere-failure-domain-in-use-by-machine"

	// VAPCPMSFailureDomainName is the name of the ValidatingAdmissionPolicy that guards
	// against removing a vSphere failure domain that is still referenced by a ControlPlaneMachineSet.
	VAPCPMSFailureDomainName = "vsphere-failure-domain-in-use-by-cpms"

	// VAPMachineSetFailureDomainName is the name of the ValidatingAdmissionPolicy that guards
	// against removing a vSphere failure domain that is still referenced by a MachineSet (including
	// MachineSets with zero replicas that would have no running Machines to catch the check).
	VAPMachineSetFailureDomainName = "vsphere-failure-domain-in-use-by-machineset"
)

Variables

This section is empty.

Functions

func MachineMutatingWebhook 

func MachineMutatingWebhook() admissionregistrationv1.MutatingWebhook

MachineMutatingWebhook returns mutating webhooks for machine to apply in configuration

func MachineSetMutatingWebhook 

func MachineSetMutatingWebhook() admissionregistrationv1.MutatingWebhook

MachineSetMutatingWebhook returns mutating webhook for machineSet to apply in configuration

func MachineSetValidatingWebhook 

func MachineSetValidatingWebhook() admissionregistrationv1.ValidatingWebhook

MachineSetValidatingWebhook returns validating webhooks for machineSet to populate the configuration

func MachineValidatingWebhook 

func MachineValidatingWebhook() admissionregistrationv1.ValidatingWebhook

MachineValidatingWebhook returns validating webhooks for machine to populate the configuration

func Metal3RemediationMutatingWebhook 

func Metal3RemediationMutatingWebhook() admissionregistrationv1.MutatingWebhook

Metal3RemediationMutatingWebhook returns mutating webhook for metal3remediation to apply in configuration

func Metal3RemediationTemplateMutatingWebhook 

func Metal3RemediationTemplateMutatingWebhook() admissionregistrationv1.MutatingWebhook

Metal3RemediationTemplateMutatingWebhook returns mutating webhook for metal3remediationtemplate to apply in configuration

func Metal3RemediationTemplateValidatingWebhook 

func Metal3RemediationTemplateValidatingWebhook() admissionregistrationv1.ValidatingWebhook

Metal3RemediationTemplateValidatingWebhook returns validating webhooks for metal3remediationtemplate to populate the configuration

func Metal3RemediationValidatingWebhook 

func Metal3RemediationValidatingWebhook() admissionregistrationv1.ValidatingWebhook

Metal3RemediationValidatingWebhook returns validating webhooks for metal3remediation to populate the configuration

func NewMachineDefaulter 

func NewMachineDefaulter() (*admission.Webhook, error)

NewDefaulter returns a new machineDefaulterHandler.

func NewMachineMutatingWebhookConfiguration 

func NewMachineMutatingWebhookConfiguration() *admissionregistrationv1.MutatingWebhookConfiguration

NewMachineMutatingWebhookConfiguration creates a mutating webhook configuration with configured Machine and MachineSet webhooks

func NewMachineSetDefaulter 

func NewMachineSetDefaulter() (*admission.Webhook, error)

NewMachineSetDefaulter returns a new machineSetDefaulterHandler.

func NewMachineSetValidator 

func NewMachineSetValidator(client client.Client, featureGate featuregate.MutableFeatureGate) (*admission.Webhook, error)

NewMachineSetValidator returns a new machineSetValidatorHandler.

func NewMachineValidatingWebhookConfiguration 

func NewMachineValidatingWebhookConfiguration() *admissionregistrationv1.ValidatingWebhookConfiguration

NewMachineValidatingWebhookConfiguration creates a validation webhook configuration with configured Machine and MachineSet webhooks

func NewMachineValidator 

func NewMachineValidator(client client.Client, featureGate featuregate.MutableFeatureGate) (*admission.Webhook, error)

NewValidator returns a new machineValidatorHandler.

func NewMetal3RemediationMutatingWebhookConfiguration 

func NewMetal3RemediationMutatingWebhookConfiguration() *admissionregistrationv1.MutatingWebhookConfiguration

NewMetal3RemediationMutatingWebhookConfiguration creates a mutating webhook configuration with configured metal3remediation(template) webhooks. Metal3Remediation(Templates) were backported from metal3, their CRDs and the actual webhook implementation can be found in cluster-api-provider-baremetal

func NewMetal3RemediationValidatingWebhookConfiguration 

func NewMetal3RemediationValidatingWebhookConfiguration() *admissionregistrationv1.ValidatingWebhookConfiguration

NewMetal3RemediationValidatingWebhookConfiguration creates a validation webhook configuration with configured metal3remediation(template) webhooks. Metal3Remediation(Templates) were backported from metal3, their CRDs and the actual webhook implementation can be found in cluster-api-provider-baremetal

func NewVSphereFailureDomainCPMSVAP 

func NewVSphereFailureDomainCPMSVAP() *admissionregistrationv1.ValidatingAdmissionPolicy

NewVSphereFailureDomainCPMSVAP returns a ValidatingAdmissionPolicy that prevents an infrastructure/cluster UPDATE from removing a vSphere failure domain that is still referenced by a ControlPlaneMachineSet (CPMS) by failure domain name.

The CPMS references failure domains by the Name field of VSpherePlatformFailureDomainSpec. The policy fires on every UPDATE of infrastructures.config.openshift.io and is evaluated once per ControlPlaneMachineSet in the openshift-machine-api namespace.

func NewVSphereFailureDomainCPMSVAPBinding 

func NewVSphereFailureDomainCPMSVAPBinding() *admissionregistrationv1.ValidatingAdmissionPolicyBinding

NewVSphereFailureDomainCPMSVAPBinding returns the ValidatingAdmissionPolicyBinding that connects the CPMS VAP to all ControlPlaneMachineSets in the openshift-machine-api namespace.

func NewVSphereFailureDomainMachineSetVAP 

func NewVSphereFailureDomainMachineSetVAP() *admissionregistrationv1.ValidatingAdmissionPolicy

NewVSphereFailureDomainMachineSetVAP returns a ValidatingAdmissionPolicy that prevents an Infrastructure update from removing a vSphere failure domain that is still referenced by at least one MachineSet (identified via machine.openshift.io/region and machine.openshift.io/zone labels on the MachineSet template). This covers MachineSets with zero replicas, which would otherwise have no running Machines for the Machine VAP to check.

func NewVSphereFailureDomainMachineSetVAPBinding 

func NewVSphereFailureDomainMachineSetVAPBinding() *admissionregistrationv1.ValidatingAdmissionPolicyBinding

NewVSphereFailureDomainMachineSetVAPBinding returns a ValidatingAdmissionPolicyBinding that connects the MachineSet VAP to all MachineSets in the openshift-machine-api namespace.

func NewVSphereFailureDomainMachineVAP 

func NewVSphereFailureDomainMachineVAP() *admissionregistrationv1.ValidatingAdmissionPolicy

NewVSphereFailureDomainMachineVAP returns a ValidatingAdmissionPolicy that prevents an infrastructure/cluster UPDATE from removing a vSphere failure domain that is still referenced by at least one Machine (identified via machine.openshift.io/region and machine.openshift.io/zone labels).

The policy fires on every UPDATE of infrastructures.config.openshift.io. It is evaluated once per Machine that exists in the openshift-machine-api namespace (param binding). If any Machine's region+zone labels match a failure domain being removed, admission is denied.

func NewVSphereFailureDomainMachineVAPBinding 

func NewVSphereFailureDomainMachineVAPBinding() *admissionregistrationv1.ValidatingAdmissionPolicyBinding

NewVSphereFailureDomainMachineVAPBinding returns the ValidatingAdmissionPolicyBinding that connects the Machine VAP to all Machines in the openshift-machine-api namespace. The policy is evaluated once per Machine (param).

Types

This section is empty.

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.