kubernetes/plugin/pkg/admission/podtolerationrestriction/admission.go

const PluginName …

// Register registers a plugin
func Register(plugins *admission.Plugins) { … }

const NSDefaultTolerations …

const NSWLTolerations …

var _ …

var _ …

var _ …

var _ …

type Plugin …

// Admit checks the admission policy and triggers corresponding actions
func (p *Plugin) Admit(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error { … }

// Validate we can obtain a whitelist of tolerations
func (p *Plugin) Validate(ctx context.Context, a admission.Attributes, o admission.ObjectInterfaces) error { … }

func shouldIgnore(a admission.Attributes) bool { … }

// NewPodTolerationsPlugin initializes a Plugin
func NewPodTolerationsPlugin(pluginConfig *pluginapi.Configuration) *Plugin { … }

// SetExternalKubeClientSet sets th client
func (p *Plugin) SetExternalKubeClientSet(client kubernetes.Interface) { … }

// SetExternalKubeInformerFactory initializes the Informer Factory
func (p *Plugin) SetExternalKubeInformerFactory(f informers.SharedInformerFactory) { … }

// ValidateInitialization checks the object is properly initialized
func (p *Plugin) ValidateInitialization() error { … }

// in exceptional cases, this can result in two live calls, but once the cache catches up, that will stop.
func (p *Plugin) getNamespace(nsName string) (*corev1.Namespace, error) { … }

func (p *Plugin) getNamespaceDefaultTolerations(nsName string) ([]api.Toleration, error) { … }

func (p *Plugin) getNamespaceTolerationsWhitelist(nsName string) ([]api.Toleration, error) { … }

// extractNSTolerations extracts default or whitelist of tolerations from
// following namespace annotations keys: "scheduler.alpha.kubernetes.io/defaultTolerations"
// and "scheduler.alpha.kubernetes.io/tolerationsWhitelist". If these keys are
// unset (nil), extractNSTolerations returns nil. If the value to these
// keys are set to empty, an empty toleration is returned, otherwise
// configured tolerations are returned.
func extractNSTolerations(ns *corev1.Namespace, key string) ([]api.Toleration, error) { … }