const secretName … const deploymentName … const serviceName … const roleBindingName … const skipNamespaceLabelKey … const skipNamespaceLabelValue … const skipNamespaceBaseName … const disallowedPodName … const toBeAttachedPodName … const hangingPodName … const disallowedConfigMapName … const allowedConfigMapName … const failNamespaceLabelKey … const failNamespaceLabelValue … const failNamespaceBaseName … const addedLabelKey … const addedLabelValue … var _ … func newValidatingWebhookWithMatchConditions( f *framework.Framework, servicePort int32, certCtx *certContext, matchConditions []admissionregistrationv1.MatchCondition, ) *admissionregistrationv1.ValidatingWebhookConfiguration { … } func newMutatingWebhookWithMatchConditions( f *framework.Framework, servicePort int32, certCtx *certContext, matchConditions []admissionregistrationv1.MatchCondition, ) *admissionregistrationv1.MutatingWebhookConfiguration { … } func createAuthReaderRoleBinding(ctx context.Context, f *framework.Framework, namespace string) { … } func deployWebhookAndService(ctx context.Context, f *framework.Framework, image string, certCtx *certContext, servicePort int32, containerPort int32) { … } func strPtr(s string) *string { … } func registerWebhook(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func registerWebhookForAttachingPod(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func registerMutatingWebhookForConfigMap(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func testMutatingConfigMapWebhook(ctx context.Context, f *framework.Framework) { … } func registerMutatingWebhookForPod(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func testMutatingPodWebhook(ctx context.Context, f *framework.Framework) { … } func toBeMutatedPod(f *framework.Framework) *v1.Pod { … } func testWebhook(ctx context.Context, f *framework.Framework) { … } func testAttachingPodWebhook(ctx context.Context, f *framework.Framework) { … } // failingWebhook returns a webhook with rule of create configmaps, // but with an invalid client config so that server cannot communicate with it func failingWebhook(namespace, name string, servicePort int32) admissionregistrationv1.ValidatingWebhook { … } func registerFailClosedWebhook(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func testFailClosedWebhook(ctx context.Context, f *framework.Framework) { … } func registerValidatingWebhookForWebhookConfigurations(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func registerMutatingWebhookForWebhookConfigurations(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } // This test assumes that the deletion-rejecting webhook defined in // registerValidatingWebhookForWebhookConfigurations and the webhook-config-mutating // webhook defined in registerMutatingWebhookForWebhookConfigurations already exist. func testWebhooksForWebhookConfigurations(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func nonCompliantPod(f *framework.Framework) *v1.Pod { … } func hangingPod(f *framework.Framework) *v1.Pod { … } func toBeAttachedPod(f *framework.Framework) *v1.Pod { … } func nonCompliantConfigMap(f *framework.Framework) *v1.ConfigMap { … } func namedNonCompliantConfigMap(name string, f *framework.Framework) *v1.ConfigMap { … } func toBeMutatedConfigMap(f *framework.Framework) *v1.ConfigMap { … } func namedToBeMutatedConfigMap(name string, f *framework.Framework) *v1.ConfigMap { … } func nonCompliantConfigMapPatch() string { … } type updateConfigMapFn … func updateConfigMap(ctx context.Context, c clientset.Interface, ns, name string, update updateConfigMapFn) (*v1.ConfigMap, error) { … } type updateCustomResourceFn … func updateCustomResource(ctx context.Context, c dynamic.ResourceInterface, ns, name string, update updateCustomResourceFn) (*unstructured.Unstructured, error) { … } func cleanWebhookTest(ctx context.Context, client clientset.Interface, namespaceName string) { … } func registerWebhookForCustomResource(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, testcrd *crd.TestCrd, servicePort int32) { … } func registerMutatingWebhookForCustomResource(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, testcrd *crd.TestCrd, servicePort int32) { … } func testCustomResourceWebhook(ctx context.Context, f *framework.Framework, crd *apiextensionsv1.CustomResourceDefinition, customResourceClient dynamic.ResourceInterface) { … } func testBlockingCustomResourceUpdateDeletion(ctx context.Context, f *framework.Framework, crd *apiextensionsv1.CustomResourceDefinition, customResourceClient dynamic.ResourceInterface) { … } func testMutatingCustomResourceWebhook(ctx context.Context, f *framework.Framework, crd *apiextensionsv1.CustomResourceDefinition, customResourceClient dynamic.ResourceInterface, prune bool) { … } func testMultiVersionCustomResourceWebhook(ctx context.Context, f *framework.Framework, testcrd *crd.TestCrd) { … } func registerValidatingWebhookForCRD(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, servicePort int32) { … } func testCRDDenyWebhook(ctx context.Context, f *framework.Framework) { … } func labelNamespace(ctx context.Context, f *framework.Framework, namespace string) { … } func registerSlowWebhook(ctx context.Context, f *framework.Framework, markersNamespaceName string, configName string, certCtx *certContext, policy *admissionregistrationv1.FailurePolicyType, timeout *int32, servicePort int32) func(ctx context.Context) { … } func testSlowWebhookTimeoutFailEarly(ctx context.Context, f *framework.Framework) { … } func testSlowWebhookTimeoutNoError(ctx context.Context, f *framework.Framework) { … } // createAdmissionWebhookMultiVersionTestCRDWithV1Storage creates a new CRD specifically // for the admission webhook calling test. func createAdmissionWebhookMultiVersionTestCRDWithV1Storage(f *framework.Framework, opts ...crd.Option) (*crd.TestCrd, error) { … } // servedAPIVersions returns the API versions served by the CRD. func servedAPIVersions(crd *apiextensionsv1.CustomResourceDefinition) []string { … } // createValidatingWebhookConfiguration ensures the webhook config scopes object or namespace selection // to avoid interfering with other tests, then creates the config. func createValidatingWebhookConfiguration(ctx context.Context, f *framework.Framework, config *admissionregistrationv1.ValidatingWebhookConfiguration) (*admissionregistrationv1.ValidatingWebhookConfiguration, error) { … } // createMutatingWebhookConfiguration ensures the webhook config scopes object or namespace selection // to avoid interfering with other tests, then creates the config. func createMutatingWebhookConfiguration(ctx context.Context, f *framework.Framework, config *admissionregistrationv1.MutatingWebhookConfiguration) (*admissionregistrationv1.MutatingWebhookConfiguration, error) { … } func newDenyPodWebhookFixture(f *framework.Framework, certCtx *certContext, servicePort int32) admissionregistrationv1.ValidatingWebhook { … } func newDenyConfigMapWebhookFixture(f *framework.Framework, certCtx *certContext, servicePort int32) admissionregistrationv1.ValidatingWebhook { … } func newMutateConfigMapWebhookFixture(f *framework.Framework, certCtx *certContext, stage int, servicePort int32) admissionregistrationv1.MutatingWebhook { … } // createWebhookConfigurationReadyNamespace creates a separate namespace for webhook configuration ready markers to // prevent cross-talk with webhook configurations being tested. It returns the name of the created namespace. func createWebhookConfigurationReadyNamespace(ctx context.Context, f *framework.Framework) string { … } // waitWebhookConfigurationReady sends "marker" requests until a webhook configuration is ready. // A webhook created with newValidatingIsReadyWebhookFixture or newMutatingIsReadyWebhookFixture should first be added to // the webhook configuration. func waitWebhookConfigurationReady(ctx context.Context, f *framework.Framework, markersNamespaceName string) error { … } // newValidatingIsReadyWebhookFixture creates a validating webhook that can be added to a webhook configuration and then probed // with "marker" requests via waitWebhookConfigurationReady to wait for a webhook configuration to be ready. func newValidatingIsReadyWebhookFixture(f *framework.Framework, certCtx *certContext, servicePort int32) admissionregistrationv1.ValidatingWebhook { … } // newMutatingIsReadyWebhookFixture creates a mutating webhook that can be added to a webhook configuration and then probed // with "marker" requests via waitWebhookConfigurationReady to wait for a webhook configuration to be ready. func newMutatingIsReadyWebhookFixture(f *framework.Framework, certCtx *certContext, servicePort int32) admissionregistrationv1.MutatingWebhook { … }
Codebase Browser
kubernetes