kubernetes/staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/validating/validator.go

type validator …

func NewValidator(validationFilter cel.Filter, celMatcher matchconditions.Matcher, auditAnnotationFilter, messageFilter cel.Filter, failPolicy *v1.FailurePolicyType) Validator { … }

func policyDecisionActionForError(f v1.FailurePolicyType) PolicyDecisionAction { … }

func auditAnnotationEvaluationForError(f v1.FailurePolicyType) PolicyAuditAnnotationAction { … }

func (v *validator) Validate(ctx context.Context, matchedResource schema.GroupVersionResource, versionedAttr *admission.VersionedAttributes, versionedParams runtime.Object, namespace *corev1.Namespace, runtimeCELCostBudget int64, authz authorizer.Authorizer) ValidateResult { … }