apiserver/pkg/admission/plugin/webhook/predicates
Cici Huang 04b26c4697 ValidatingAdmissionPolicy: support namespace access (#118267)
* Support namespace access from cel expression in validatingadmissionpolicy.

* Whitelist the exposed fields in namespace object and add test

* better handling of cluster-scoped resources.

* [API REVIEW] namespaceObject in Expression doc.

* compatibility with composition.

* generated: ./hack/update-codegen.sh && ./hack/update-openapi-spec.sh

* workaround namespace of namespace is unexpectedly set.

* basic test coverage for namespaceObject.

---------

Co-authored-by: Jiahui Feng <jhf@google.com>

Kubernetes-commit: 13172cba5c0e1c6a076dbda4aeebbccaf658c7f1
2023-07-15 01:33:59 +00:00
..
namespace ValidatingAdmissionPolicy: support namespace access (#118267) 2023-07-15 01:33:59 +00:00
object Fix canonical imports 2022-10-25 20:40:27 -07:00
rules Integrate cel admission with API. 2022-11-07 21:38:55 +00:00