const PluginName … // Register registers a plugin func Register(plugins *admission.Plugins) { … } type externalIPsDenierPlugin … var _ … var _ … // newPlugin creates a new admission plugin. func newPlugin() *externalIPsDenierPlugin { … } // Admit ensures that modifications of the Service.Spec.ExternalIPs field are // denied func (plug *externalIPsDenierPlugin) Validate(ctx context.Context, attr admission.Attributes, o admission.ObjectInterfaces) error { … } func isSubset(newSvc, oldSvc *core.Service) bool { … }