2019-03-21 18:09:14 +02:00
|
|
|
package config
|
2019-03-21 15:57:30 +02:00
|
|
|
|
|
|
|
const (
|
|
|
|
// These constants MUST be equal to the corresponding names in service definition in definitions/install.yaml
|
2019-05-14 17:58:59 +03:00
|
|
|
KubePolicyNamespace = "kube-system"
|
|
|
|
WebhookServiceName = "kube-policy-svc"
|
|
|
|
|
|
|
|
MutatingWebhookConfigurationName = "kube-policy-mutating-webhook-cfg"
|
|
|
|
MutatingWebhookName = "nirmata.kube-policy.mutating-webhook"
|
|
|
|
|
|
|
|
ValidatingWebhookConfigurationName = "kube-policy-validating-webhook-cfg"
|
|
|
|
ValidatingWebhookName = "nirmata.kube-policy.validating-webhook"
|
2019-03-21 15:57:30 +02:00
|
|
|
|
2019-03-25 15:44:53 +02:00
|
|
|
// Due to kubernetes issue, we must use next literal constants instead of deployment TypeMeta fields
|
2019-05-14 17:58:59 +03:00
|
|
|
// Issue: https://github.com/kubernetes/kubernetes/pull/63972
|
|
|
|
// When the issue is closed, we should use TypeMeta struct instead of this constants
|
|
|
|
DeploymentKind = "Deployment"
|
|
|
|
DeploymentAPIVersion = "extensions/v1beta1"
|
|
|
|
KubePolicyDeploymentName = "kube-policy-deployment"
|
2019-03-21 15:57:30 +02:00
|
|
|
)
|
|
|
|
|
|
|
|
var (
|
2019-05-14 17:58:59 +03:00
|
|
|
MutatingWebhookServicePath = "/mutate"
|
|
|
|
ValidatingWebhookServicePath = "/validate"
|
|
|
|
KubePolicyAppLabels = map[string]string{
|
2019-03-21 15:57:30 +02:00
|
|
|
"app": "kube-policy",
|
|
|
|
}
|
2019-05-14 17:58:59 +03:00
|
|
|
|
|
|
|
SupportedKinds = []string{
|
|
|
|
"ConfigMap",
|
|
|
|
"CronJob",
|
|
|
|
"DaemonSet",
|
|
|
|
"Deployment",
|
|
|
|
"Endpoints",
|
|
|
|
"HorizontalPodAutoscaler",
|
|
|
|
"Ingress",
|
|
|
|
"Job",
|
|
|
|
"LimitRange",
|
|
|
|
"Namespace",
|
|
|
|
"NetworkPolicy",
|
|
|
|
"PersistentVolumeClaim",
|
|
|
|
"PodDisruptionBudget",
|
|
|
|
"PodTemplate",
|
|
|
|
"ResourceQuota",
|
|
|
|
"Secret",
|
|
|
|
"Service",
|
|
|
|
"StatefulSet",
|
|
|
|
}
|
2019-03-25 15:44:53 +02:00
|
|
|
)
|