apiserver/pkg/admission/plugin/webhook/predicates/namespace
Cici Huang 04b26c4697 ValidatingAdmissionPolicy: support namespace access (#118267)
* Support namespace access from cel expression in validatingadmissionpolicy.

* Whitelist the exposed fields in namespace object and add test

* better handling of cluster-scoped resources.

* [API REVIEW] namespaceObject in Expression doc.

* compatibility with composition.

* generated: ./hack/update-codegen.sh && ./hack/update-openapi-spec.sh

* workaround namespace of namespace is unexpectedly set.

* basic test coverage for namespaceObject.

---------

Co-authored-by: Jiahui Feng <jhf@google.com>

Kubernetes-commit: 13172cba5c0e1c6a076dbda4aeebbccaf658c7f1
2023-07-15 01:33:59 +00:00
..
doc.go Fix canonical imports 2022-10-25 20:40:27 -07:00
matcher.go ValidatingAdmissionPolicy: support namespace access (#118267) 2023-07-15 01:33:59 +00:00
matcher_test.go Make interface for webhook predicates more specific 2022-10-25 16:34:06 -07:00