mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-06 07:57:07 +00:00
f90b982903
For cases where a policy matches the "Bindings" kind in the "core/v1" API group and version, adjust the pertinent Webhook configuration rule to use the "pods/binding" subresource. Doing so allows observing and reacting to the Kubernetes scheduler (and its "extenders") assigning pods to nodes, before any other system actors observe that assignment. This is an opportune moment in between the pod' creation and a kubelet starting it running. Signed-off-by: Steven E. Harris <seh@panix.com> |
||
|---|---|---|
| .. | ||
| certmanager.go | ||
| common.go | ||
| configmanager.go | ||
| monitor.go | ||
| policy.go | ||
| registration.go | ||
| registration_test.go | ||
| resource.go | ||
| status.go | ||