Add option to k8s apiserver to reject incoming requests upon audit failure

2018-07-03 14:40:55 +02:00
parent b1a52a38e9
commit 7a10f4eda7
18 changed files with 101 additions and 31 deletions
--- a/test/integration/examples/webhook_test.go
+++ b/test/integration/examples/webhook_test.go
@@ -108,8 +108,9 @@ func (f auditChecker) LevelAndStages(attrs authorizer.Attributes) (auditinternal

 type auditSinkFunc func(events ...*auditinternal.Event)

-func (f auditSinkFunc) ProcessEvents(events ...*auditinternal.Event) {
+func (f auditSinkFunc) ProcessEvents(events ...*auditinternal.Event) bool {
 	f(events...)
+	return true
 }

 func (auditSinkFunc) Run(stopCh <-chan struct{}) error {