diff options
| author | Dawn Chen <dawnchen@google.com> | 2015-08-05 15:14:00 -0700 |
|---|---|---|
| committer | Dawn Chen <dawnchen@google.com> | 2015-08-05 15:14:00 -0700 |
| commit | a38fc0660419c1d5c2b460a459d8b93f996f79c8 (patch) | |
| tree | 91b4d62712f025f0088a8ccd67303be045f0fb09 | |
| parent | b15dad5066d0fb1bd39b514230bfc8b2328ea72c (diff) | |
| parent | 0a0fbb58fe67fbfb864145956bf3b8b86625d190 (diff) | |
Merge pull request #12064 from AnanyaKumar/patch-2
Update admission_control.md
| -rw-r--r-- | admission_control.md | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/admission_control.md b/admission_control.md index c75d5535..b84b2543 100644 --- a/admission_control.md +++ b/admission_control.md @@ -98,16 +98,17 @@ func init() { Invocation of admission control is handled by the **APIServer** and not individual **RESTStorage** implementations. -This design assumes that **Issue 297** is adopted, and as a consequence, the general framework of the APIServer request/response flow -will ensure the following: +This design assumes that **Issue 297** is adopted, and as a consequence, the general framework of the APIServer request/response flow will ensure the following: 1. Incoming request 2. Authenticate user 3. Authorize user -4. If operation=create|update, then validate(object) -5. If operation=create|update|delete, then admission.Admit(requestAttributes) - a. invoke each admission.Interface object in sequence -6. Object is persisted +4. If operation=create|update|delete|connect, then admission.Admit(requestAttributes) + - invoke each admission.Interface object in sequence +5. Case on the operation: + - If operation=create|update, then validate(object) and persist + - If operation=delete, delete the object + - If operation=connect, exec If at any step, there is an error, the request is canceled. |
