const maxTypesToCheck … type TypeChecker … type TypeCheckingContext … type typeOverwrite … type TypeCheckingResult … type TypeCheckingResults … func (rs TypeCheckingResults) String() string { … } // String converts the result to human-readable form as a string. func (r *TypeCheckingResult) String() string { … } // Check preforms the type check against the given policy, and format the result // as []ExpressionWarning that is ready to be set in policy.Status // The result is nil if type checking returns no warning. // The policy object is NOT mutated. The caller should update Status accordingly func (c *TypeChecker) Check(policy *v1.ValidatingAdmissionPolicy) []v1.ExpressionWarning { … } // CreateContext resolves all types and their schemas from a policy definition and creates the context. func (c *TypeChecker) CreateContext(policy *v1.ValidatingAdmissionPolicy) *TypeCheckingContext { … } func (c *TypeChecker) compiler(ctx *TypeCheckingContext, typeOverwrite typeOverwrite) (*plugincel.CompositedCompiler, error) { … } // CheckExpression type checks a single expression, given the context func (c *TypeChecker) CheckExpression(ctx *TypeCheckingContext, expression string) TypeCheckingResults { … } type celExpression … func (c celExpression) GetExpression() string { … } func (c celExpression) ReturnTypes() []*cel.Type { … } func generateUniqueTypeName(kind string) string { … } func (c *TypeChecker) declType(gvk schema.GroupVersionKind) (*apiservercel.DeclType, error) { … } func (c *TypeChecker) paramsGVK(policy *v1.ValidatingAdmissionPolicy) schema.GroupVersionKind { … } // typesToCheck extracts a list of GVKs that needs type checking from the policy // the result is sorted in the order of Group, Version, and Kind func (c *TypeChecker) typesToCheck(p *v1.ValidatingAdmissionPolicy) []schema.GroupVersionKind { … } func extractGroups(rule *v1.Rule) []string { … } func extractVersions(rule *v1.Rule) []string { … } func extractResources(rule *v1.Rule) []string { … } // sortGVKList sorts the list by Group, Version, and Kind // returns the list itself. func sortGVKList(list []schema.GroupVersionKind) []schema.GroupVersionKind { … } // tryRefreshRESTMapper refreshes the RESTMapper if it supports refreshing. func (c *TypeChecker) tryRefreshRESTMapper() { … } func buildEnvSet(hasParams bool, hasAuthorizer bool, types typeOverwrite) (*environment.EnvSet, error) { … } // createVariableOpts creates a slice of EnvOption // that can be used for creating a CEL env containing variables of declType. // declType can be nil, in which case the variables will be of DynType. func createVariableOpts(declType *apiservercel.DeclType, variables ...string) []cel.EnvOption { … } type typeCheckingCompiler … // CompileCELExpression compiles the given expression. // The implementation is the same as that of staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compile.go // except that: // - object, oldObject, and params are typed instead of Dyn // - compiler does not enforce the output type // - the compiler does not initialize the program func (c *typeCheckingCompiler) CompileCELExpression(expressionAccessor plugincel.ExpressionAccessor, options plugincel.OptionalVariableDeclarations, mode environment.Type) plugincel.CompilationResult { … } var _ …
Codebase Browser
kubernetes