kubernetes/staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/matching/matching.go

type MatchCriteria …

type Matcher …

func (m *Matcher) GetNamespace(name string) (*corev1.Namespace, error) { … }

// NewMatcher initialize the matcher with dependencies requires
func NewMatcher(
	namespaceLister listersv1.NamespaceLister,
	client kubernetes.Interface,
) *Matcher { … }

// ValidateInitialization verify if the matcher is ready before use
func (m *Matcher) ValidateInitialization() error { … }

func (m *Matcher) Matches(attr admission.Attributes, o admission.ObjectInterfaces, criteria MatchCriteria) (bool, schema.GroupVersionResource, schema.GroupVersionKind, error) { … }

func matchesResourceRules(namedRules []v1.NamedRuleWithOperations, matchPolicy *v1.MatchPolicyType, attr admission.Attributes, o admission.ObjectInterfaces) (bool, schema.GroupVersionResource, schema.GroupVersionKind, error) { … }

type attrWithResourceOverride …

func (a *attrWithResourceOverride) GetResource() schema.GroupVersionResource { … }