summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDawn Chen <dawnchen@google.com>2015-08-05 15:14:00 -0700
committerDawn Chen <dawnchen@google.com>2015-08-05 15:14:00 -0700
commita38fc0660419c1d5c2b460a459d8b93f996f79c8 (patch)
tree91b4d62712f025f0088a8ccd67303be045f0fb09
parentb15dad5066d0fb1bd39b514230bfc8b2328ea72c (diff)
parent0a0fbb58fe67fbfb864145956bf3b8b86625d190 (diff)
Merge pull request #12064 from AnanyaKumar/patch-2
Update admission_control.md
-rw-r--r--admission_control.md13
1 files changed, 7 insertions, 6 deletions
diff --git a/admission_control.md b/admission_control.md
index c75d5535..b84b2543 100644
--- a/admission_control.md
+++ b/admission_control.md
@@ -98,16 +98,17 @@ func init() {
Invocation of admission control is handled by the **APIServer** and not individual **RESTStorage** implementations.
-This design assumes that **Issue 297** is adopted, and as a consequence, the general framework of the APIServer request/response flow
-will ensure the following:
+This design assumes that **Issue 297** is adopted, and as a consequence, the general framework of the APIServer request/response flow will ensure the following:
1. Incoming request
2. Authenticate user
3. Authorize user
-4. If operation=create|update, then validate(object)
-5. If operation=create|update|delete, then admission.Admit(requestAttributes)
- a. invoke each admission.Interface object in sequence
-6. Object is persisted
+4. If operation=create|update|delete|connect, then admission.Admit(requestAttributes)
+ - invoke each admission.Interface object in sequence
+5. Case on the operation:
+ - If operation=create|update, then validate(object) and persist
+ - If operation=delete, delete the object
+ - If operation=connect, exec
If at any step, there is an error, the request is canceled.