UPSTREAM: <carry>: Clusterize MutatingAdmissionPolicy admission plugin and policy plugin framework

On-behalf-of: SAP [email protected]
Signed-off-by: Robert Vasek <[email protected]>

Author: gman0

staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/mutating/accessor.go

@@ -17,6 +17,7 @@ limitations under the License.
 package mutating
 
 import (
+	"github.com/kcp-dev/logicalcluster/v3"
 	v1 "k8s.io/api/admissionregistration/v1"
 	"k8s.io/api/admissionregistration/v1alpha1"
 	"k8s.io/apimachinery/pkg/types"
@@ -47,6 +48,10 @@ func (v *mutatingAdmissionPolicyAccessor) GetName() string {
 	return v.Name
 }
 
+func (v *mutatingAdmissionPolicyAccessor) GetCluster() string {
+	return logicalcluster.From(v.Policy).String()
+}
+
 func (v *mutatingAdmissionPolicyAccessor) GetParamKind() *v1.ParamKind {
 	pk := v.Spec.ParamKind
 	if pk == nil {
@@ -86,6 +91,10 @@ func (v *mutatingAdmissionPolicyBindingAccessor) GetName() string {
 	return v.Name
 }
 
+func (v *mutatingAdmissionPolicyBindingAccessor) GetCluster() string {
+	return logicalcluster.From(v.PolicyBinding).String()
+}
+
 func (v *mutatingAdmissionPolicyBindingAccessor) GetPolicyName() types.NamespacedName {
 	return types.NamespacedName{
 		Namespace: "",

staging/src/k8s.io/apiserver/pkg/admission/plugin/policy/mutating/plugin.go

@@ -21,6 +21,7 @@ import (
 	celgo "github.com/google/cel-go/cel"
 	"io"
 
+	"github.com/kcp-dev/logicalcluster/v3"
 	"k8s.io/api/admissionregistration/v1alpha1"
 	corev1 "k8s.io/api/core/v1"
 	"k8s.io/apimachinery/pkg/api/meta"
@@ -94,7 +95,7 @@ func NewPlugin(_ io.Reader) *Plugin {
 	res := &Plugin{}
 	res.Plugin = generic.NewPlugin(
 		handler,
-		func(f informers.SharedInformerFactory, client kubernetes.Interface, dynamicClient dynamic.Interface, restMapper meta.RESTMapper) generic.Source[PolicyHook] {
+		func(f informers.SharedInformerFactory, client kubernetes.Interface, dynamicClient dynamic.Interface, restMapper meta.RESTMapper, clusterName logicalcluster.Name) generic.Source[PolicyHook] {
 			return generic.NewPolicySource(
 				f.Admissionregistration().V1alpha1().MutatingAdmissionPolicies().Informer(),
 				f.Admissionregistration().V1alpha1().MutatingAdmissionPolicyBindings().Informer(),
@@ -106,6 +107,7 @@ func NewPlugin(_ io.Reader) *Plugin {
 				f,
 				dynamicClient,
 				restMapper,
+				clusterName,
 			)
 		},
 		func(a authorizer.Authorizer, m *matching.Matcher, client kubernetes.Interface) generic.Dispatcher[PolicyHook] {