diff --git a/pkg/apis/admissionregistration/validation/validation.go b/pkg/apis/admissionregistration/validation/validation.go index 32d14cc2253..78b5c8cc869 100644 --- a/pkg/apis/admissionregistration/validation/validation.go +++ b/pkg/apis/admissionregistration/validation/validation.go @@ -28,7 +28,7 @@ import ( "k8s.io/apimachinery/pkg/util/sets" utilvalidation "k8s.io/apimachinery/pkg/util/validation" "k8s.io/apimachinery/pkg/util/validation/field" - plugincel "k8s.io/apiserver/pkg/admission/plugin/cel" + plugincel "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy" "k8s.io/apiserver/pkg/cel" "k8s.io/apiserver/pkg/util/webhook" "k8s.io/kubernetes/pkg/apis/admissionregistration" diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go index e4abde3d789..b2755dfca73 100644 --- a/pkg/features/kube_features.go +++ b/pkg/features/kube_features.go @@ -1134,7 +1134,7 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS genericfeatures.AdvancedAuditing: {Default: true, PreRelease: featuregate.GA}, - genericfeatures.CELValidatingAdmission: {Default: false, PreRelease: featuregate.Alpha}, + genericfeatures.ValidatingAdmissionPolicy: {Default: false, PreRelease: featuregate.Alpha}, genericfeatures.CustomResourceValidationExpressions: {Default: true, PreRelease: featuregate.Beta}, diff --git a/pkg/kubeapiserver/options/plugins.go b/pkg/kubeapiserver/options/plugins.go index 9501de708d9..ddca6953458 100644 --- a/pkg/kubeapiserver/options/plugins.go +++ b/pkg/kubeapiserver/options/plugins.go @@ -20,7 +20,7 @@ package options // This should probably be part of some configuration fed into the build for a // given binary target. import ( - validatingpolicy "k8s.io/apiserver/pkg/admission/plugin/cel" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy" // Admission policies "k8s.io/kubernetes/plugin/pkg/admission/admit" "k8s.io/kubernetes/plugin/pkg/admission/alwayspullimages" @@ -97,11 +97,11 @@ var AllOrderedPlugins = []string{ // new admission plugins should generally be inserted above here // webhook, resourcequota, and deny plugins must go at the end - mutatingwebhook.PluginName, // MutatingAdmissionWebhook - validatingpolicy.PluginName, // ValidatingAdmissionPolicy - validatingwebhook.PluginName, // ValidatingAdmissionWebhook - resourcequota.PluginName, // ResourceQuota - deny.PluginName, // AlwaysDeny + mutatingwebhook.PluginName, // MutatingAdmissionWebhook + validatingadmissionpolicy.PluginName, // ValidatingAdmissionPolicy + validatingwebhook.PluginName, // ValidatingAdmissionWebhook + resourcequota.PluginName, // ResourceQuota + deny.PluginName, // AlwaysDeny } // RegisterAllAdmissionPlugins registers all admission plugins. @@ -161,7 +161,7 @@ func DefaultOffAdmissionPlugins() sets.String { certsubjectrestriction.PluginName, // CertificateSubjectRestriction defaultingressclass.PluginName, // DefaultIngressClass podsecurity.PluginName, // PodSecurity - validatingpolicy.PluginName, // ValidatingAdmissionPolicy, only active when feature gate CELValidatingAdmission is enabled + validatingadmissionpolicy.PluginName, // ValidatingAdmissionPolicy, only active when feature gate ValidatingAdmissionPolicy is enabled ) return sets.NewString(AllOrderedPlugins...).Difference(defaultOnPlugins) diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/OWNERS b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/OWNERS similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/OWNERS rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/OWNERS diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/admission.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission.go similarity index 98% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/admission.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission.go index a2e14542400..acc307630fe 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/admission.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "context" @@ -109,7 +109,7 @@ func (c *celAdmissionPlugin) SetDrainedNotification(stopCh <-chan struct{}) { } func (c *celAdmissionPlugin) InspectFeatureGates(featureGates featuregate.FeatureGate) { - if featureGates.Enabled(features.CELValidatingAdmission) { + if featureGates.Enabled(features.ValidatingAdmissionPolicy) { c.enabled = true } c.inspectedFeatureGates = true diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/admission_test.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission_test.go similarity index 99% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/admission_test.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission_test.go index 063533fa2a5..684a4659b7e 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/admission_test.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/admission_test.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "context" @@ -34,7 +34,7 @@ import ( "k8s.io/apimachinery/pkg/util/wait" "k8s.io/apiserver/pkg/admission" "k8s.io/apiserver/pkg/admission/initializer" - "k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic" "k8s.io/apiserver/pkg/features" dynamicfake "k8s.io/client-go/dynamic/fake" "k8s.io/client-go/informers" @@ -249,13 +249,13 @@ func setupTestCommon(t *testing.T, compiler ValidatorCompiler, shouldStartInform fakeInformerFactory := informers.NewSharedInformerFactory(fakeClient, time.Second) featureGate := featuregate.NewFeatureGate() err := featureGate.Add(map[featuregate.Feature]featuregate.FeatureSpec{ - features.CELValidatingAdmission: { + features.ValidatingAdmissionPolicy: { Default: true, PreRelease: featuregate.Alpha}}) if err != nil { // FIXME: handle error. panic("Unexpected error") } - err = featureGate.SetFromMap(map[string]bool{string(features.CELValidatingAdmission): true}) + err = featureGate.SetFromMap(map[string]bool{string(features.ValidatingAdmissionPolicy): true}) if err != nil { // FIXME: handle error. panic("Unexpected error.") diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compiler.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/compiler.go similarity index 99% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compiler.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/compiler.go index 3adb6623e5c..3767c0d9d1c 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compiler.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/compiler.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "sync" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compiler_test.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/compiler_test.go similarity index 99% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compiler_test.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/compiler_test.go index 3bae35a22ed..f60efb775df 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/compiler_test.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/compiler_test.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "strings" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/controller.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/controller.go similarity index 98% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/controller.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/controller.go index 690e881e199..4398aa6b133 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/controller.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/controller.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "context" @@ -25,7 +25,7 @@ import ( metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" - "k8s.io/apiserver/pkg/admission/plugin/cel/matching" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching" "k8s.io/api/admissionregistration/v1alpha1" k8serrors "k8s.io/apimachinery/pkg/api/errors" @@ -35,7 +35,7 @@ import ( "k8s.io/apimachinery/pkg/util/sets" "k8s.io/apiserver/pkg/admission" celmetrics "k8s.io/apiserver/pkg/admission/cel" - "k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic" "k8s.io/client-go/dynamic" "k8s.io/client-go/informers" "k8s.io/client-go/kubernetes" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/controller_reconcile.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/controller_reconcile.go similarity index 98% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/controller_reconcile.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/controller_reconcile.go index 321d17bd701..cbc89b518d6 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/controller_reconcile.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/controller_reconcile.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "context" @@ -27,7 +27,7 @@ import ( "k8s.io/apimachinery/pkg/runtime/schema" "k8s.io/apimachinery/pkg/util/sets" celmetrics "k8s.io/apiserver/pkg/admission/cel" - "k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic" "k8s.io/client-go/dynamic/dynamicinformer" "k8s.io/client-go/tools/cache" ) diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/initializer.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/initializer.go similarity index 96% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/initializer.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/initializer.go index f35bd571663..563bb69de10 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/initializer.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/initializer.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "context" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/interface.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/interface.go similarity index 98% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/interface.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/interface.go index 8a20110d48e..217d6bfc47c 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/interface.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/interface.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "k8s.io/api/admissionregistration/v1alpha1" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/controller.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/controller.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/controller_test.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller_test.go similarity index 99% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/controller_test.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller_test.go index ad78dfbabfc..2d3af72f084 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/controller_test.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/controller_test.go @@ -39,7 +39,7 @@ import ( "k8s.io/apimachinery/pkg/util/wait" "k8s.io/apimachinery/pkg/watch" - "k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic" clienttesting "k8s.io/client-go/testing" "k8s.io/client-go/tools/cache" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/doc.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/doc.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/doc.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/doc.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/informer.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/informer.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/informer.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/informer.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/interface.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/interface.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/interface.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/interface.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/lister.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/lister.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic/lister.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic/lister.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/matching/matching.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching/matching.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/matching/matching.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching/matching.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/matching/matching_test.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching/matching_test.go similarity index 100% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/matching/matching_test.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching/matching_test.go diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/policy_decision.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/policy_decision.go similarity index 98% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/policy_decision.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/policy_decision.go index daaefd03539..1018743705b 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/policy_decision.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/policy_decision.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "net/http" diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/validator.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/validator.go similarity index 98% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/validator.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/validator.go index dd8f6a6df3a..033d2e48e15 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/validator.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/validator.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "fmt" @@ -34,7 +34,7 @@ import ( "k8s.io/apimachinery/pkg/runtime" "k8s.io/apimachinery/pkg/runtime/schema" "k8s.io/apiserver/pkg/admission" - "k8s.io/apiserver/pkg/admission/plugin/cel/matching" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching" "k8s.io/apiserver/pkg/admission/plugin/webhook/generic" ) diff --git a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/validator_test.go b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/validator_test.go similarity index 99% rename from staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/validator_test.go rename to staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/validator_test.go index 6905358a7fb..fff818bee94 100644 --- a/staging/src/k8s.io/apiserver/pkg/admission/plugin/cel/validator_test.go +++ b/staging/src/k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/validator_test.go @@ -14,7 +14,7 @@ See the License for the specific language governing permissions and limitations under the License. */ -package cel +package validatingadmissionpolicy import ( "strings" diff --git a/staging/src/k8s.io/apiserver/pkg/features/kube_features.go b/staging/src/k8s.io/apiserver/pkg/features/kube_features.go index da253e9a53f..5da481fdd4f 100644 --- a/staging/src/k8s.io/apiserver/pkg/features/kube_features.go +++ b/staging/src/k8s.io/apiserver/pkg/features/kube_features.go @@ -93,7 +93,7 @@ const ( // alpha: v1.26 // // Enables expression validation in Admission Control - CELValidatingAdmission featuregate.Feature = "CELValidatingAdmission" + ValidatingAdmissionPolicy featuregate.Feature = "ValidatingAdmissionPolicy" // owner: @cici37 // kep: https://kep.k8s.io/2876 @@ -222,7 +222,7 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS AdvancedAuditing: {Default: true, PreRelease: featuregate.GA}, - CELValidatingAdmission: {Default: false, PreRelease: featuregate.Alpha}, + ValidatingAdmissionPolicy: {Default: false, PreRelease: featuregate.Alpha}, CustomResourceValidationExpressions: {Default: true, PreRelease: featuregate.Beta}, diff --git a/staging/src/k8s.io/apiserver/pkg/server/options/admission.go b/staging/src/k8s.io/apiserver/pkg/server/options/admission.go index 1159e297d65..5ee0036de1f 100644 --- a/staging/src/k8s.io/apiserver/pkg/server/options/admission.go +++ b/staging/src/k8s.io/apiserver/pkg/server/options/admission.go @@ -28,8 +28,8 @@ import ( "k8s.io/apiserver/pkg/admission" "k8s.io/apiserver/pkg/admission/initializer" admissionmetrics "k8s.io/apiserver/pkg/admission/metrics" - "k8s.io/apiserver/pkg/admission/plugin/cel" "k8s.io/apiserver/pkg/admission/plugin/namespace/lifecycle" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy" mutatingwebhook "k8s.io/apiserver/pkg/admission/plugin/webhook/mutating" validatingwebhook "k8s.io/apiserver/pkg/admission/plugin/webhook/validating" apiserverapi "k8s.io/apiserver/pkg/apis/apiserver" @@ -87,7 +87,7 @@ func NewAdmissionOptions() *AdmissionOptions { // admission plugins. The apiserver always runs the validating ones // after all the mutating ones, so their relative order in this list // doesn't matter. - RecommendedPluginOrder: []string{lifecycle.PluginName, mutatingwebhook.PluginName, cel.PluginName, validatingwebhook.PluginName}, + RecommendedPluginOrder: []string{lifecycle.PluginName, mutatingwebhook.PluginName, validatingadmissionpolicy.PluginName, validatingwebhook.PluginName}, DefaultOffPlugins: sets.NewString(), } server.RegisterAllAdmissionPlugins(options.Plugins) diff --git a/staging/src/k8s.io/apiserver/pkg/server/plugins.go b/staging/src/k8s.io/apiserver/pkg/server/plugins.go index adb83a908ef..25acf92dc87 100644 --- a/staging/src/k8s.io/apiserver/pkg/server/plugins.go +++ b/staging/src/k8s.io/apiserver/pkg/server/plugins.go @@ -19,8 +19,8 @@ package server // This file exists to force the desired plugin implementations to be linked into genericapi pkg. import ( "k8s.io/apiserver/pkg/admission" - "k8s.io/apiserver/pkg/admission/plugin/cel" "k8s.io/apiserver/pkg/admission/plugin/namespace/lifecycle" + "k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy" mutatingwebhook "k8s.io/apiserver/pkg/admission/plugin/webhook/mutating" validatingwebhook "k8s.io/apiserver/pkg/admission/plugin/webhook/validating" ) @@ -30,5 +30,5 @@ func RegisterAllAdmissionPlugins(plugins *admission.Plugins) { lifecycle.Register(plugins) validatingwebhook.Register(plugins) mutatingwebhook.Register(plugins) - cel.Register(plugins) + validatingadmissionpolicy.Register(plugins) } diff --git a/test/integration/apiserver/cel/validatingadmissionpolicy_test.go b/test/integration/apiserver/cel/validatingadmissionpolicy_test.go index fcf040713b8..6b303443ba3 100644 --- a/test/integration/apiserver/cel/validatingadmissionpolicy_test.go +++ b/test/integration/apiserver/cel/validatingadmissionpolicy_test.go @@ -166,7 +166,7 @@ func Test_ValidateNamespace_NoParams(t *testing.T) { for _, testcase := range testcases { t.Run(testcase.name, func(t *testing.T) { - defer featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, genericfeatures.CELValidatingAdmission, true)() + defer featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, genericfeatures.ValidatingAdmissionPolicy, true)() server, err := apiservertesting.StartTestServer(t, nil, []string{ "--enable-admission-plugins", "ValidatingAdmissionPolicy", }, framework.SharedEtcd()) @@ -270,7 +270,7 @@ func Test_ValidateNamespace_WithConfigMapParams(t *testing.T) { for _, testcase := range testcases { t.Run(testcase.name, func(t *testing.T) { - defer featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, genericfeatures.CELValidatingAdmission, true)() + defer featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, genericfeatures.ValidatingAdmissionPolicy, true)() server, err := apiservertesting.StartTestServer(t, nil, []string{ "--enable-admission-plugins", "ValidatingAdmissionPolicy", }, framework.SharedEtcd()) @@ -327,7 +327,7 @@ func Test_ValidateNamespace_WithConfigMapParams(t *testing.T) { } func TestMultiplePolicyBindings(t *testing.T) { - defer featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, genericfeatures.CELValidatingAdmission, true)() + defer featuregatetesting.SetFeatureGateDuringTest(t, utilfeature.DefaultFeatureGate, genericfeatures.ValidatingAdmissionPolicy, true)() server, err := apiservertesting.StartTestServer(t, nil, nil, framework.SharedEtcd()) if err != nil { t.Fatal(err) diff --git a/vendor/modules.txt b/vendor/modules.txt index f7e0a5fce18..908aef11871 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -1436,9 +1436,6 @@ k8s.io/apiserver/pkg/admission/cel k8s.io/apiserver/pkg/admission/configuration k8s.io/apiserver/pkg/admission/initializer k8s.io/apiserver/pkg/admission/metrics -k8s.io/apiserver/pkg/admission/plugin/cel -k8s.io/apiserver/pkg/admission/plugin/cel/internal/generic -k8s.io/apiserver/pkg/admission/plugin/cel/matching k8s.io/apiserver/pkg/admission/plugin/namespace/lifecycle k8s.io/apiserver/pkg/admission/plugin/resourcequota k8s.io/apiserver/pkg/admission/plugin/resourcequota/apis/resourcequota @@ -1447,6 +1444,9 @@ k8s.io/apiserver/pkg/admission/plugin/resourcequota/apis/resourcequota/v1 k8s.io/apiserver/pkg/admission/plugin/resourcequota/apis/resourcequota/v1alpha1 k8s.io/apiserver/pkg/admission/plugin/resourcequota/apis/resourcequota/v1beta1 k8s.io/apiserver/pkg/admission/plugin/resourcequota/apis/resourcequota/validation +k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy +k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/internal/generic +k8s.io/apiserver/pkg/admission/plugin/validatingadmissionpolicy/matching k8s.io/apiserver/pkg/admission/plugin/webhook k8s.io/apiserver/pkg/admission/plugin/webhook/config k8s.io/apiserver/pkg/admission/plugin/webhook/config/apis/webhookadmission