kubernetes/plugin/pkg/admission/gc/gc_admission.go

const PluginName …

// Register registers a plugin
func Register(plugins *admission.Plugins) { … }

type gcPermissionsEnforcement …

var _ …

type whiteListItem …

// isWhiteListed returns true if the specified item is in the whitelist.
func (a *gcPermissionsEnforcement) isWhiteListed(groupResource schema.GroupResource, subresource string) bool { … }

func (a *gcPermissionsEnforcement) Validate(ctx context.Context, attributes admission.Attributes, o admission.ObjectInterfaces) (err error) { … }

func isChangingOwnerReference(newObj, oldObj runtime.Object) bool { … }

func finalizeAnythingRecord(userInfo user.Info) authorizer.AttributesRecord { … }

// Translates ref to a DeleteAttribute deleting the object referred by the ref.
// OwnerReference only records the object kind, which might map to multiple
// resources, so multiple DeleteAttribute might be returned.
func (a *gcPermissionsEnforcement) ownerRefToDeleteAttributeRecords(ref metav1.OwnerReference, attributes admission.Attributes) ([]authorizer.AttributesRecord, error) { … }

// only keeps the blocking refs
func blockingOwnerRefs(refs []metav1.OwnerReference) []metav1.OwnerReference { … }

func indexByUID(refs []metav1.OwnerReference) map[types.UID]metav1.OwnerReference { … }

// Returns new blocking ownerReferences, and references whose blockOwnerDeletion
// field is changed from nil or false to true.
func newBlockingOwnerDeletionRefs(newObj, oldObj runtime.Object) []metav1.OwnerReference { … }

func (a *gcPermissionsEnforcement) SetAuthorizer(authorizer authorizer.Authorizer) { … }

func (a *gcPermissionsEnforcement) SetRESTMapper(restMapper meta.RESTMapper) { … }

func (a *gcPermissionsEnforcement) ValidateInitialization() error { … }