nhyatt/mutating-webhook
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

adds notes and gitignore for vscode

Browse Source
This commit is contained in:
Hyatt 2022-10-11 07:38:40 -05:00
parent d0bc1b72c6
commit 7468a6dcb4
Signed by: nhyatt
GPG Key ID: C50D0BBB5BC40BEA
2 changed files with 13 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
.vscode/*

29
cmd/webhook/mutate.go
View File

@ -1,21 +1,15 @@
package main package main
/*
import ( import (
"fmt"
"log"
"strings"
"encoding/json"
"io/ioutil"
"net/http" "net/http"
admission "k8s.io/api/admission/v1"
core "k8s.io/api/core/v1"
meta "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/runtime/serializer"
) )
func webMutatePod(w http.ResponseWriter, r *http.Request) {
//https://github.com/douglasmakey/admissioncontroller
}
/*
var ( var (
codecs = serializer.NewCodecFactory(runtime.NewScheme()) codecs = serializer.NewCodecFactory(runtime.NewScheme())
) )
@ -123,6 +117,7 @@ func mutationResp(w http.ResponseWriter, aRRequest *admission.AdmissionReview, a
w.Write(resp) w.Write(resp)
} }
/*
// create mutation patch for resources // create mutation patch for resources
func createPatch(pod *core.Pod, containers []core.Container) ([]byte, error) { func createPatch(pod *core.Pod, containers []core.Container) ([]byte, error) {
var ( var (
@ -154,7 +149,7 @@ func createPatch(pod *core.Pod, containers []core.Container) ([]byte, error) {
return json.Marshal(patch) return json.Marshal(patch)
} }
// Check whether the target resourse needs to be mutated // Check whether the target resource needs to be mutated
func mutationRequired(metadata *meta.ObjectMeta) bool { func mutationRequired(metadata *meta.ObjectMeta) bool {
var ignoredNamespaces = []string{ var ignoredNamespaces = []string{
meta.NamespaceSystem, meta.NamespaceSystem,
@ -164,7 +159,7 @@ func mutationRequired(metadata *meta.ObjectMeta) bool {
// skip special kubernetes system namespaces // skip special kubernetes system namespaces
for _, namespace := range ignoredNamespaces { for _, namespace := range ignoredNamespaces {
if metadata.Namespace == namespace { if metadata.Namespace == namespace {
log.Printf("[TRACE] Skip mutation for %v for it's in special namespace:%v", metadata.Name, metadata.Namespace) log.Printf("[TRACE] Protected namespace detected (%s) skipping mutation: %s", metadata.Namespace, metadata.Name)
return false return false
} }
} }
@ -183,7 +178,7 @@ func mutationRequired(metadata *meta.ObjectMeta) bool {
required = false required = false
} }
log.Printf("[TRACE] Mutation policy for %v/%v: required:%v", metadata.Namespace, metadata.Name, required) log.Printf("[TRACE] Mutation policy for %s/%s: required:%b", metadata.Namespace, metadata.Name, required)
return required return required
} }
*/ */