mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-11-13 14:41:42 +00:00
Automatic merge from submit-queue (batch tested with PRs 39807, 37505, 39844, 39525, 39109) Admission control support for versioned configuration files **What this PR does / why we need it**: Today, the `--admission-control-config-file=` argument takes an opaque file that is shared across all admission controllers to provide configuration. This file is not well-versioned and it's shared across multiple plug-ins. Some plugins take file based configuration (`ImagePolicyWebhook`) and others abuse flags to provide configuration because we lacked a good example (`InitialResources`). This PR defines a versioned configuration format that we can use moving forward to provide configuration input to admission controllers that is well-versioned, and does not require the addition of new flags. The sample configuration file would look as follows: ``` apiVersion: componentconfig/v1alpha1 kind: AdmissionConfiguration plugins: - name: "ImagePolicyWebhook" path: "image-policy-webhook.json" ``` The general behavior is each plugin that requires additional configuration is enumerated by name. An alternate file location is provided for its specific configuration, or the configuration can be embedded as a raw extension via the configuration section. **Special notes for your reviewer**: A follow-on PR will be needed to make `ImagePolicyWebhook` to use versioned configuration. This PR maintains backwards compatibility by ignoring configuration it cannot understand and therefore treating the file as opaque. I plan to make use of this PR to complete https://github.com/kubernetes/kubernetes/pull/36765 which attempts to allow more configuration parameters to the `ResourceQuota` admission plugin.
301 lines
9.8 KiB
Go
301 lines
9.8 KiB
Go
// +build !ignore_autogenerated
|
|
|
|
/*
|
|
Copyright 2017 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
// This file was autogenerated by deepcopy-gen. Do not edit it manually!
|
|
|
|
package componentconfig
|
|
|
|
import (
|
|
conversion "k8s.io/apimachinery/pkg/conversion"
|
|
runtime "k8s.io/apimachinery/pkg/runtime"
|
|
api "k8s.io/kubernetes/pkg/api"
|
|
config "k8s.io/kubernetes/pkg/util/config"
|
|
reflect "reflect"
|
|
)
|
|
|
|
func init() {
|
|
SchemeBuilder.Register(RegisterDeepCopies)
|
|
}
|
|
|
|
// RegisterDeepCopies adds deep-copy functions to the given scheme. Public
|
|
// to allow building arbitrary schemes.
|
|
func RegisterDeepCopies(scheme *runtime.Scheme) error {
|
|
return scheme.AddGeneratedDeepCopyFuncs(
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_AdmissionConfiguration, InType: reflect.TypeOf(&AdmissionConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_AdmissionPluginConfiguration, InType: reflect.TypeOf(&AdmissionPluginConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_IPVar, InType: reflect.TypeOf(&IPVar{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeControllerManagerConfiguration, InType: reflect.TypeOf(&KubeControllerManagerConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeProxyConfiguration, InType: reflect.TypeOf(&KubeProxyConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeSchedulerConfiguration, InType: reflect.TypeOf(&KubeSchedulerConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletAnonymousAuthentication, InType: reflect.TypeOf(&KubeletAnonymousAuthentication{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletAuthentication, InType: reflect.TypeOf(&KubeletAuthentication{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletAuthorization, InType: reflect.TypeOf(&KubeletAuthorization{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletConfiguration, InType: reflect.TypeOf(&KubeletConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletWebhookAuthentication, InType: reflect.TypeOf(&KubeletWebhookAuthentication{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletWebhookAuthorization, InType: reflect.TypeOf(&KubeletWebhookAuthorization{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_KubeletX509Authentication, InType: reflect.TypeOf(&KubeletX509Authentication{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_LeaderElectionConfiguration, InType: reflect.TypeOf(&LeaderElectionConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_PersistentVolumeRecyclerConfiguration, InType: reflect.TypeOf(&PersistentVolumeRecyclerConfiguration{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_PortRangeVar, InType: reflect.TypeOf(&PortRangeVar{})},
|
|
conversion.GeneratedDeepCopyFunc{Fn: DeepCopy_componentconfig_VolumeConfiguration, InType: reflect.TypeOf(&VolumeConfiguration{})},
|
|
)
|
|
}
|
|
|
|
func DeepCopy_componentconfig_AdmissionConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*AdmissionConfiguration)
|
|
out := out.(*AdmissionConfiguration)
|
|
*out = *in
|
|
if in.Plugins != nil {
|
|
in, out := &in.Plugins, &out.Plugins
|
|
*out = make([]AdmissionPluginConfiguration, len(*in))
|
|
for i := range *in {
|
|
if err := DeepCopy_componentconfig_AdmissionPluginConfiguration(&(*in)[i], &(*out)[i], c); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_AdmissionPluginConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*AdmissionPluginConfiguration)
|
|
out := out.(*AdmissionPluginConfiguration)
|
|
*out = *in
|
|
// in.Configuration is kind 'Interface'
|
|
if in.Configuration != nil {
|
|
if newVal, err := c.DeepCopy(&in.Configuration); err != nil {
|
|
return err
|
|
} else {
|
|
out.Configuration = *newVal.(*runtime.Object)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_IPVar(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*IPVar)
|
|
out := out.(*IPVar)
|
|
*out = *in
|
|
if in.Val != nil {
|
|
in, out := &in.Val, &out.Val
|
|
*out = new(string)
|
|
**out = **in
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeControllerManagerConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeControllerManagerConfiguration)
|
|
out := out.(*KubeControllerManagerConfiguration)
|
|
*out = *in
|
|
if in.Controllers != nil {
|
|
in, out := &in.Controllers, &out.Controllers
|
|
*out = make([]string, len(*in))
|
|
copy(*out, *in)
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeProxyConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeProxyConfiguration)
|
|
out := out.(*KubeProxyConfiguration)
|
|
*out = *in
|
|
if in.IPTablesMasqueradeBit != nil {
|
|
in, out := &in.IPTablesMasqueradeBit, &out.IPTablesMasqueradeBit
|
|
*out = new(int32)
|
|
**out = **in
|
|
}
|
|
if in.OOMScoreAdj != nil {
|
|
in, out := &in.OOMScoreAdj, &out.OOMScoreAdj
|
|
*out = new(int32)
|
|
**out = **in
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeSchedulerConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeSchedulerConfiguration)
|
|
out := out.(*KubeSchedulerConfiguration)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletAnonymousAuthentication(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletAnonymousAuthentication)
|
|
out := out.(*KubeletAnonymousAuthentication)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletAuthentication(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletAuthentication)
|
|
out := out.(*KubeletAuthentication)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletAuthorization(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletAuthorization)
|
|
out := out.(*KubeletAuthorization)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletConfiguration)
|
|
out := out.(*KubeletConfiguration)
|
|
*out = *in
|
|
if in.HostNetworkSources != nil {
|
|
in, out := &in.HostNetworkSources, &out.HostNetworkSources
|
|
*out = make([]string, len(*in))
|
|
copy(*out, *in)
|
|
}
|
|
if in.HostPIDSources != nil {
|
|
in, out := &in.HostPIDSources, &out.HostPIDSources
|
|
*out = make([]string, len(*in))
|
|
copy(*out, *in)
|
|
}
|
|
if in.HostIPCSources != nil {
|
|
in, out := &in.HostIPCSources, &out.HostIPCSources
|
|
*out = make([]string, len(*in))
|
|
copy(*out, *in)
|
|
}
|
|
if in.RegisterWithTaints != nil {
|
|
in, out := &in.RegisterWithTaints, &out.RegisterWithTaints
|
|
*out = make([]api.Taint, len(*in))
|
|
for i := range *in {
|
|
(*out)[i] = (*in)[i]
|
|
}
|
|
}
|
|
if in.NodeLabels != nil {
|
|
in, out := &in.NodeLabels, &out.NodeLabels
|
|
*out = make(map[string]string)
|
|
for key, val := range *in {
|
|
(*out)[key] = val
|
|
}
|
|
}
|
|
if in.SystemReserved != nil {
|
|
in, out := &in.SystemReserved, &out.SystemReserved
|
|
*out = make(config.ConfigurationMap)
|
|
for key, val := range *in {
|
|
(*out)[key] = val
|
|
}
|
|
}
|
|
if in.KubeReserved != nil {
|
|
in, out := &in.KubeReserved, &out.KubeReserved
|
|
*out = make(config.ConfigurationMap)
|
|
for key, val := range *in {
|
|
(*out)[key] = val
|
|
}
|
|
}
|
|
if in.AllowedUnsafeSysctls != nil {
|
|
in, out := &in.AllowedUnsafeSysctls, &out.AllowedUnsafeSysctls
|
|
*out = make([]string, len(*in))
|
|
copy(*out, *in)
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletWebhookAuthentication(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletWebhookAuthentication)
|
|
out := out.(*KubeletWebhookAuthentication)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletWebhookAuthorization(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletWebhookAuthorization)
|
|
out := out.(*KubeletWebhookAuthorization)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_KubeletX509Authentication(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*KubeletX509Authentication)
|
|
out := out.(*KubeletX509Authentication)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_LeaderElectionConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*LeaderElectionConfiguration)
|
|
out := out.(*LeaderElectionConfiguration)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_PersistentVolumeRecyclerConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*PersistentVolumeRecyclerConfiguration)
|
|
out := out.(*PersistentVolumeRecyclerConfiguration)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_PortRangeVar(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*PortRangeVar)
|
|
out := out.(*PortRangeVar)
|
|
*out = *in
|
|
if in.Val != nil {
|
|
in, out := &in.Val, &out.Val
|
|
*out = new(string)
|
|
**out = **in
|
|
}
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func DeepCopy_componentconfig_VolumeConfiguration(in interface{}, out interface{}, c *conversion.Cloner) error {
|
|
{
|
|
in := in.(*VolumeConfiguration)
|
|
out := out.(*VolumeConfiguration)
|
|
*out = *in
|
|
return nil
|
|
}
|
|
}
|