validation

func ForKind ¶ added in v0.13.11

func ForKind(
	gk schema.GroupKind,
	handler handlers.Handler,
	subresources ...string,
) handlers.Handler

ForKind scopes a validator hosted by the generic rules endpoint to one concrete Kubernetes kind. The main resource is always included; named subresources may be included explicitly. The scope check runs before tenant/ruleset resolution and object decoding.

func GenericRules ¶

func GenericRules(
	regexCache *cache.RegexCache,
	compilers ...ruleengine.ConditionCompiler,
) handlers.TypedHandlerWithTenantWithRuleset[genericObject]

func IngressRules ¶ added in v0.13.10

func IngressRules(regexCache *cache.RegexCache, compilers ...ruleengine.ConditionCompiler) handlers.TypedHandlerWithTenantWithRuleset[*unstructured.Unstructured]

func Register ¶

func Register(
	regexCache *cache.RegexCache,
	selectorCache *cache.LabelSelectorCache,
	cfg configuration.Configuration,
	compiler ruleengine.ConditionCompiler,
	templates handlers.TypedHandlerWithTenantWithRuleset[*unstructured.Unstructured],
	resourceRules ...handlers.Handler,
) handlers.Webhook