Documentation ¶
Overview ¶
+groupName=policy.kubevault.com
Index ¶
- Constants
- Variables
- func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenAPIDefinition
- func Resource(resource string) schema.GroupResource
- type PolicyBindingCondition
- type PolicyBindingConditionType
- type PolicyBindingStatus
- type PolicyCondition
- type PolicyConditionType
- type PolicyStatus
- type ServiceAccountReference
- type VaultPolicy
- func (v VaultPolicy) CustomResourceDefinition() *apiextensions.CustomResourceDefinition
- func (in *VaultPolicy) DeepCopy() *VaultPolicy
- func (in *VaultPolicy) DeepCopyInto(out *VaultPolicy)
- func (in *VaultPolicy) DeepCopyObject() runtime.Object
- func (v VaultPolicy) GetKey() string
- func (v VaultPolicy) IsValid() error
- func (v VaultPolicy) OffshootLabels() map[string]string
- func (v VaultPolicy) OffshootSelectors() map[string]string
- func (v VaultPolicy) PolicyName() string
- type VaultPolicyBinding
- func (v VaultPolicyBinding) CustomResourceDefinition() *apiextensions.CustomResourceDefinition
- func (in *VaultPolicyBinding) DeepCopy() *VaultPolicyBinding
- func (in *VaultPolicyBinding) DeepCopyInto(out *VaultPolicyBinding)
- func (in *VaultPolicyBinding) DeepCopyObject() runtime.Object
- func (v VaultPolicyBinding) GetKey() string
- func (v VaultPolicyBinding) IsValid() error
- func (v VaultPolicyBinding) OffshootLabels() map[string]string
- func (v VaultPolicyBinding) OffshootSelectors() map[string]string
- func (v VaultPolicyBinding) PolicyBindingName() string
- func (v *VaultPolicyBinding) SetDefaults()
- type VaultPolicyBindingList
- type VaultPolicyBindingSpec
- type VaultPolicyBindingStatus
- type VaultPolicyList
- type VaultPolicySpec
- type VaultPolicyStatus
Constants ¶
const ( ResourceKindVaultPolicy = "VaultPolicy" ResourceVaultPolicy = "vaultpolicy" ResourceVaultPolicies = "vaultpolicies" )
const ( ResourceKindVaultPolicyBinding = "VaultPolicyBinding" ResourceVaultPolicyBinding = "vaultpolicybinding" ResourceVaultPolicyBindings = "vaultpolicybindings" )
Variables ¶
var ( // TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api. // localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes. SchemeBuilder runtime.SchemeBuilder AddToScheme = localSchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: policy.GroupName, Version: "v1alpha1"}
Functions ¶
func GetOpenAPIDefinitions ¶
func GetOpenAPIDefinitions(ref common.ReferenceCallback) map[string]common.OpenAPIDefinition
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type PolicyBindingCondition ¶
type PolicyBindingCondition struct { // Type of PolicyBindingCondition condition. // +optional Type PolicyBindingConditionType `json:"type,omitempty"` // Status of the condition, one of True, False, Unknown. // +optional Status core.ConditionStatus `json:"status,omitempty"` // The reason for the condition's. // +optional Reason string `json:"reason,omitempty"` // A human readable message indicating details about the transition. // +optional Message string `json:"message,omitempty"` }
PolicyBindingCondition describes the state of a VaultPolicyBinding at a certain point.
func (*PolicyBindingCondition) DeepCopy ¶
func (in *PolicyBindingCondition) DeepCopy() *PolicyBindingCondition
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyBindingCondition.
func (*PolicyBindingCondition) DeepCopyInto ¶
func (in *PolicyBindingCondition) DeepCopyInto(out *PolicyBindingCondition)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type PolicyBindingConditionType ¶
type PolicyBindingConditionType string
const (
PolicyBindingConditionFailure PolicyBindingConditionType = "Failure"
)
These are valid conditions of a VaultPolicyBinding.
type PolicyBindingStatus ¶
type PolicyBindingStatus string
const ( PolicyBindingSuccess PolicyBindingStatus = "Success" PolicyBindingFailed PolicyBindingStatus = "Failed" )
type PolicyCondition ¶
type PolicyCondition struct { // Type of PolicyCondition condition. // +optional Type PolicyConditionType `json:"type,omitempty"` // Status of the condition, one of True, False, Unknown. // +optional Status core.ConditionStatus `json:"status,omitempty"` // The reason for the condition's. // +optional Reason string `json:"reason,omitempty"` // A human readable message indicating details about the transition. // +optional Message string `json:"message,omitempty"` }
PolicyCondition describes the state of a VaultPolicy at a certain point.
func (*PolicyCondition) DeepCopy ¶
func (in *PolicyCondition) DeepCopy() *PolicyCondition
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyCondition.
func (*PolicyCondition) DeepCopyInto ¶
func (in *PolicyCondition) DeepCopyInto(out *PolicyCondition)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type PolicyConditionType ¶
type PolicyConditionType string
const (
PolicyConditionFailure PolicyConditionType = "Failure"
)
These are valid conditions of a VaultPolicy.
type PolicyStatus ¶
type PolicyStatus string
const ( PolicySuccess PolicyStatus = "Success" PolicyFailed PolicyStatus = "Failed" )
type ServiceAccountReference ¶
type ServiceAccountReference struct { Name string `json:"name"` Namespace string `json:"namespace"` }
ServiceAccountReference contains name and namespace of the service account
func (*ServiceAccountReference) DeepCopy ¶
func (in *ServiceAccountReference) DeepCopy() *ServiceAccountReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceAccountReference.
func (*ServiceAccountReference) DeepCopyInto ¶
func (in *ServiceAccountReference) DeepCopyInto(out *ServiceAccountReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type VaultPolicy ¶
type VaultPolicy struct { metav1.TypeMeta `json:",inline,omitempty"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec VaultPolicySpec `json:"spec,omitempty"` Status VaultPolicyStatus `json:"status,omitempty"` }
func (VaultPolicy) CustomResourceDefinition ¶
func (v VaultPolicy) CustomResourceDefinition() *apiextensions.CustomResourceDefinition
func (*VaultPolicy) DeepCopy ¶
func (in *VaultPolicy) DeepCopy() *VaultPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicy.
func (*VaultPolicy) DeepCopyInto ¶
func (in *VaultPolicy) DeepCopyInto(out *VaultPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*VaultPolicy) DeepCopyObject ¶
func (in *VaultPolicy) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (VaultPolicy) GetKey ¶
func (v VaultPolicy) GetKey() string
func (VaultPolicy) IsValid ¶
func (v VaultPolicy) IsValid() error
func (VaultPolicy) OffshootLabels ¶
func (v VaultPolicy) OffshootLabels() map[string]string
func (VaultPolicy) OffshootSelectors ¶
func (v VaultPolicy) OffshootSelectors() map[string]string
func (VaultPolicy) PolicyName ¶
func (v VaultPolicy) PolicyName() string
type VaultPolicyBinding ¶
type VaultPolicyBinding struct { metav1.TypeMeta `json:",inline,omitempty"` metav1.ObjectMeta `json:"metadata,omitempty"` Spec VaultPolicyBindingSpec `json:"spec,omitempty"` Status VaultPolicyBindingStatus `json:"status,omitempty"` }
func (VaultPolicyBinding) CustomResourceDefinition ¶
func (v VaultPolicyBinding) CustomResourceDefinition() *apiextensions.CustomResourceDefinition
func (*VaultPolicyBinding) DeepCopy ¶
func (in *VaultPolicyBinding) DeepCopy() *VaultPolicyBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicyBinding.
func (*VaultPolicyBinding) DeepCopyInto ¶
func (in *VaultPolicyBinding) DeepCopyInto(out *VaultPolicyBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*VaultPolicyBinding) DeepCopyObject ¶
func (in *VaultPolicyBinding) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (VaultPolicyBinding) GetKey ¶
func (v VaultPolicyBinding) GetKey() string
func (VaultPolicyBinding) IsValid ¶
func (v VaultPolicyBinding) IsValid() error
func (VaultPolicyBinding) OffshootLabels ¶
func (v VaultPolicyBinding) OffshootLabels() map[string]string
func (VaultPolicyBinding) OffshootSelectors ¶
func (v VaultPolicyBinding) OffshootSelectors() map[string]string
func (VaultPolicyBinding) PolicyBindingName ¶
func (v VaultPolicyBinding) PolicyBindingName() string
func (*VaultPolicyBinding) SetDefaults ¶
func (v *VaultPolicyBinding) SetDefaults()
type VaultPolicyBindingList ¶
type VaultPolicyBindingList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []VaultPolicyBinding `json:"items,omitempty"` }
func (*VaultPolicyBindingList) DeepCopy ¶
func (in *VaultPolicyBindingList) DeepCopy() *VaultPolicyBindingList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicyBindingList.
func (*VaultPolicyBindingList) DeepCopyInto ¶
func (in *VaultPolicyBindingList) DeepCopyInto(out *VaultPolicyBindingList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*VaultPolicyBindingList) DeepCopyObject ¶
func (in *VaultPolicyBindingList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type VaultPolicyBindingSpec ¶
type VaultPolicyBindingSpec struct { // +optional RoleName string `json:"roleName,omitempty"` // Specifies the path where kubernetes auth is enabled // default : kubernetes // +optional AuthPath string `json:"authPath,omitempty"` // Specifies the names of the VaultPolicy Policies []string `json:"policies"` // Specifies the names of the service account to bind with policy ServiceAccountNames []string `json:"serviceAccountNames"` // Specifies the namespaces of the service account ServiceAccountNamespaces []string `json:"serviceAccountNamespaces"` //Specifies the TTL period of tokens issued using this role in seconds. // +optional TTL string `json:"TTL,omitempty"` //Specifies the maximum allowed lifetime of tokens issued in seconds using this role. // +optional MaxTTL string `json:"maxTTL,omitempty"` // If set, indicates that the token generated using this role should never expire. // The token should be renewed within the duration specified by this value. // At each renewal, the token's TTL will be set to the value of this parameter. // +optional Period string `json:"period,omitempty"` }
links: https://www.vaultproject.io/api/auth/kubernetes/index.html#parameters-1
func (*VaultPolicyBindingSpec) DeepCopy ¶
func (in *VaultPolicyBindingSpec) DeepCopy() *VaultPolicyBindingSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicyBindingSpec.
func (*VaultPolicyBindingSpec) DeepCopyInto ¶
func (in *VaultPolicyBindingSpec) DeepCopyInto(out *VaultPolicyBindingSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type VaultPolicyBindingStatus ¶
type VaultPolicyBindingStatus struct { // observedGeneration is the most recent generation observed for this resource. It corresponds to the // resource's generation, which is updated on mutation by the API Server. // +optional ObservedGeneration *types.IntHash `json:"observedGeneration,omitempty"` // Status indicates whether successfully bind the policy to service account in vault or not or in progress // +optional Status PolicyBindingStatus `json:"status,omitempty"` // Represents the latest available observations of a VaultPolicyBinding. // +optional Conditions []PolicyBindingCondition `json:"conditions,omitempty"` }
func (*VaultPolicyBindingStatus) DeepCopy ¶
func (in *VaultPolicyBindingStatus) DeepCopy() *VaultPolicyBindingStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicyBindingStatus.
func (*VaultPolicyBindingStatus) DeepCopyInto ¶
func (in *VaultPolicyBindingStatus) DeepCopyInto(out *VaultPolicyBindingStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type VaultPolicyList ¶
type VaultPolicyList struct { metav1.TypeMeta `json:",inline"` metav1.ListMeta `json:"metadata,omitempty"` Items []VaultPolicy `json:"items,omitempty"` }
func (*VaultPolicyList) DeepCopy ¶
func (in *VaultPolicyList) DeepCopy() *VaultPolicyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicyList.
func (*VaultPolicyList) DeepCopyInto ¶
func (in *VaultPolicyList) DeepCopyInto(out *VaultPolicyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*VaultPolicyList) DeepCopyObject ¶
func (in *VaultPolicyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type VaultPolicySpec ¶
type VaultPolicySpec struct { // Policy specifies the vault policy in hcl format. // For example: // path "secret/*" { // capabilities = ["create", "read", "update", "delete", "list"] // } Policy string `json:"policy"` // Vault contains the reference of kmodules.xyz/custom-resources/apis/appcatalog/v1alpha1.AppBinding // which contains information to communicate with vault VaultAppRef *appcat.AppReference `json:"vaultAppRef"` }
func (*VaultPolicySpec) DeepCopy ¶
func (in *VaultPolicySpec) DeepCopy() *VaultPolicySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicySpec.
func (*VaultPolicySpec) DeepCopyInto ¶
func (in *VaultPolicySpec) DeepCopyInto(out *VaultPolicySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type VaultPolicyStatus ¶
type VaultPolicyStatus struct { // observedGeneration is the most recent generation observed for this resource. It corresponds to the // resource's generation, which is updated on mutation by the API Server. // +optional ObservedGeneration *types.IntHash `json:"observedGeneration,omitempty"` // Status indicates whether the policy successfully applied in vault or not or in progress // +optional Status PolicyStatus `json:"status,omitempty"` // Represents the latest available observations of a VaultPolicy. // +optional Conditions []PolicyCondition `json:"conditions,omitempty"` }
func (*VaultPolicyStatus) DeepCopy ¶
func (in *VaultPolicyStatus) DeepCopy() *VaultPolicyStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new VaultPolicyStatus.
func (*VaultPolicyStatus) DeepCopyInto ¶
func (in *VaultPolicyStatus) DeepCopyInto(out *VaultPolicyStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.