const PluginName … // Register registers a plugin func Register(plugins *admission.Plugins) { … } type alwaysDeny … var _ … var _ … // Admit makes an admission decision based on the request attributes. func (alwaysDeny) Admit(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error) { … } // Validate makes an admission decision based on the request attributes. It is NOT allowed to mutate. func (alwaysDeny) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) (err error) { … } // Handles returns true if this admission controller can handle the given operation // where operation can be one of CREATE, UPDATE, DELETE, or CONNECT func (alwaysDeny) Handles(operation admission.Operation) bool { … } // NewAlwaysDeny creates an always deny admission handler func NewAlwaysDeny() admission.Interface { … }